Side by side
EventSentry File Monitoring vs Samhain
Both stand on file integrity monitoring software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan LinuxMacWeb+1
EventSentry File Monitoring combines file-change tracking, alerting, and cross-computer status consolidation. Note that it does not currently identify who made a change, and its full edition is priced per Windows device.
Visit EventSentry File Monitoring Free plan LinuxMacSelf-hosted+1
Samhain offers host monitoring with both standalone and centralized deployment options. Readers using Windows should note that the listed testing applies to the monitoring agent rather than the server.
Visit SamhainThe facts
| EventSentry File Monitoring | Samhain | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | Linux, Mac, Web, Windows | Linux, Mac, Self-hosted, Windows |
| Lowest paid plan | See the plans | Not published |
| Plans published | 2 | None |
| Maker | Not published | Not published |
| Website | eventsentry.com | la-samhna.de |
| On file integrity monitoring software | #6 of 34 | #10 of 34 |
EventSentry File Monitoring: what it does well
- Tracks additions, removals, size, and checksum changes.
- Collects certificates and entropy.
- Consolidates monitored-file status across computers.
- Supports multiple notification and integration targets.
- Helps with PCI requirement 11.5.
What to know first
- Does not report who changed a file.
- Full edition is $85 per Windows device.
- Free edition has no SIEM capability or dashboards.
Samhain: what it does well
- Free and distributed under the GNU General Public Licence
- Checks file checksums and metadata
- Client/server setup centralizes reports and baselines
- Optional log and host-activity monitoring
- Signed reports and encrypted central logging
What to know first
- Windows/Cygwin testing covers the agent, not the server
- Beltane requires client/server installation and SQL logging
- Agentless monitoring is not supported
Alternatives to EventSentry File Monitoring Alternatives to Samhain The whole list