FREEDOM251

Freedom251 › Compare

Side by side

EventSentry File Monitoring vs Samhain

Both stand on file integrity monitoring software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.

EventSentry File Monitoring

Free plan LinuxMacWeb+1

EventSentry File Monitoring combines file-change tracking, alerting, and cross-computer status consolidation. Note that it does not currently identify who made a change, and its full edition is priced per Windows device.

Visit EventSentry File Monitoring

Samhain

Free plan LinuxMacSelf-hosted+1

Samhain offers host monitoring with both standalone and centralized deployment options. Readers using Windows should note that the listed testing applies to the monitoring agent rather than the server.

Visit Samhain

The facts

EventSentry File MonitoringSamhain
Free planYesYes
Open sourceNot publishedNot published
Runs onLinux, Mac, Web, WindowsLinux, Mac, Self-hosted, Windows
Lowest paid planSee the plansNot published
Plans published2None
MakerNot publishedNot published
Websiteeventsentry.comla-samhna.de
On file integrity monitoring software#6 of 34#10 of 34

EventSentry File Monitoring: what it does well

  • Tracks additions, removals, size, and checksum changes.
  • Collects certificates and entropy.
  • Consolidates monitored-file status across computers.
  • Supports multiple notification and integration targets.
  • Helps with PCI requirement 11.5.

What to know first

  • Does not report who changed a file.
  • Full edition is $85 per Windows device.
  • Free edition has no SIEM capability or dashboards.

Samhain: what it does well

  • Free and distributed under the GNU General Public Licence
  • Checks file checksums and metadata
  • Client/server setup centralizes reports and baselines
  • Optional log and host-activity monitoring
  • Signed reports and encrypted central logging

What to know first

  • Windows/Cygwin testing covers the agent, not the server
  • Beltane requires client/server installation and SQL logging
  • Agentless monitoring is not supported

Alternatives to EventSentry File Monitoring Alternatives to Samhain The whole list