Overview
LevelBlue OSSIM is trusted by security professionals across the globe
LevelBlue® OSSIM™ is a feature-rich, open-source security information and event management (SIEM) that includes event collection, normalization, and correlation. LevelBlue OSSIM was launched by engineers because of a lack of available open-source products and to address the reality many security professionals face, which is that a SIEM, whether it is open source or commercial, is no good if it does not provide security visibility.
What's right for you?
Compare open source to commercial
Our open-source SIEM (LevelBlue OSSIM) addresses this reality by providing one unified platform with many of the essential security capabilities you need like:
- Asset discovery
- Vulnerability assessment
- Intrusion detection
- Behavioral monitoring
- SIEM event correlation
LevelBlue OSSIM leverages the power of LevelBlue Labs® Open Threat Exchange® (OTX™) by allowing users to both contribute and receive real-time information about malicious hosts. In addition, we provide ongoing development for LevelBlue OSSIM because we believe that everyone should have access to sophisticated security technologies to improve the security of all. From the researchers who need a platform for experimentation to the unsung heroes working to convince their companies of the need for security, LevelBlue OSSIM offers the chance to increase security visibility and control in your network.
Become a Cybersecurity MSSP Partner
Expand your service catalog and increase your revenue with unified, essential security and compliance services from our Cybersecurity.
Get the most out of LevelBlue OSSIM with these resources
“With so many products/services out there, it’s hard for people to know where to start and where they can get the most bang for their buck. LevelBlue OSSIM was a great starting point for me, and migrating to LevelBlue USM has brought even more value.”
Matthew J. Frederickson – Cybersecurity Specialist at Council Rock School District
Compare LevelBlue OSSIM and USM Anywhere
Which product is right for you?
USM Anywhere™ provides more advanced functionality to IT security teams with limited resources in the form of unified essential security controls and continuously updated threat intelligence.
With USM Anywhere, security practitioners can quickly and easily deploy a single platform that delivers powerful threat detection, incident response, and compliance management across cloud environments, on-premises infrastructure, and cloud apps.
USM Anywhere offers:
- Centralized threat detection and incident response across cloud environments, on-premises infrastructure, and cloud apps
- Log management for ongoing compliance and forensics investigations
- Advanced threat detection with real-time, prioritized alarms and minimal false positives
- Continuous LevelBlue Labs threat intelligence so you stay up to date on emerging threats
- Pre-built compliance reports for PCI DSS, HIPAA, NIST CSF, and more
Find the right solution for your organization
OSSIM™
Anywhere™
Product Availability
Open-Source Software Download
Cloud-Hosted Service
Pricing
Open Source
Security Monitoring
On-premises Physical & Virtual Environments
AWS & Azure Cloud Environments
Cloud Apps
On-premises Physical & Virtual Environments
Deployment Architecture
Single Server Only
SaaS Delivery with sensors deployed in each monitored environment
Federation-ready
Asset Discovery & Inventory
Vulnerability Assessment
Intrusion Detection
Behavioral Monitoring
SIEM event Correlation
Log Management
Cloud Apps Security Monitoring
Integration With Third-party Ticketing Software (JIRA, ServiceNow)
learn more ›
Community Support via product Forums
Dedicated Phone & Email support
Online Product Documentation & Knowledge Base
Rich Analytics Dashboards & Data visualization
Interested in a Managed Security Solution?
Discover the Benefits of Managed Security
Test drive USM Anywhere
Start a 14-day free trial. See how easy it is to detect and investigate intrusions, identify and prioritize vulnerabilities, and monitor cloud and on-premises environments all from one tool.
LevelBlue OSSIM Resources
ISO MD5: 25b42e54f846a75bbe59aba97a2a1fe
TAR MD5: aacb6899a0cc3682a1749432c4ce3a1c
LevelBlue OSSIM-specific technical documentation is not currently available. Because LevelBlue OSSIM has many features in common with LevelBlue USM, you may be able to use the USM technical documentation.