Samhain is described as 'The Samhain host-based intrusion detection system (HIDS) provides file integrity checking and log file monitoring/analysis, as well as rootkit detection, port monitoring, detection of rogue SUID executables, and hidden processes' and is an app. There are more than 10 alternatives to Samhain for a variety of platforms, including Linux, Web-based, Mac, Windows and SaaS apps. The best Samhain alternative is Wazuh, which is both free and Open Source. Other great apps like Samhain are CrowdStrike Falcon, Ossec, Matano and AIDE.
Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments.
CrowdStrike Falcon Host integrates seamlessly into your current environment, enabling your security team to effectively and efficiently detect and block adversary activity – ultimately preventing damage to your organization through SaaS-based next-generation endpoint protection.
OSSEC is an Open Source Host-based Intrusion Detection System. It performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
Matano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in a data lake, and create Python detections as code for realtime alerting.
AIDE (Advanced Intrusion Detection Environment) is a file and directory integrity checker.
Open Source Tripwire software is a security and data integrity tool useful for monitoring and alerting on specific file change(s) on a range of systems.
Multilayered endpoint protection solution featuring advanced threat defense, full disk encryption, cloud sandbox analysis, cross-platform support, cloud or on-premises management, real-time threat prevention, centralized control, and improved data security compliance.
Mugsy is a Linux file integrity monitor. It runs as a daemon and any file modifications made to your system on directories you've specify to monitor are logged locally and optionally sent to your elasticsearch server(s).
Periodically collects system configuration for changes, it can even run external commands and store their stdout and stderr for change monitoring. Sends periodic reports via e-mail.
Compliance Warden is an AI-powered compliance platform that scans every pull request in real time, giving developers instant fix guidance and compliance teams audit-ready visibility.
Deepengine is an affordable and simple platform for vulnerability scanning, helping SMBs build robust products, ease compliance, and save money.
Use the Wiz Cloud Security Platform to build faster in the cloud, enabling security, dev and devops to work together in a self-service model built for the scale and speed of your cloud development.
United States
Slovakia
EU
Switzerland