Graylog

software

★★★★★4.2(127 reviews)

About

Graylog is an AI-powered SIEM, log management, and API security platform that gives security and operations teams unified threat detection, log analysis, and incident response.

siem log-management security observability threat-detection

Pros

+Free open-source tier covers most homelab/SMB use cases
+Unified platform avoids the SIEM + log management split

Cons

-Initial setup and dashboard creation has a learning curve
-Enterprise pricing requires sales conversation

Visit website

This may be an affiliate link — the creator and GuruStacks may earn a commission, at no extra cost to you. Learn more

Details

HeadquartersHouston, TX, USA

Typesoftware

Pricing

Model

freemium

Platforms

weblinuxwindows

Community

Listed in Stacks

Cybersecurity Analyst

Essential tools for cybersecurity analysts covering SIEM, vulnerability scanning, penetration testing, endpoint protection, network security, and incident response.

by Gurustacks0

Similar tools

View alternatives →

Rapid7 InsightIDR

4.4

siemthreat-detectionincident-response

AI-powered next-gen SIEM delivering unified threat detection, behavioral analytics, and automated incident response across hybrid environments.

Sumo Logic

4.4

siemlog-managementcloud-security

Sumo Logic is a cloud-native SIEM and log management platform with AI-powered analytics — combining security operations, infrastructure observability, and compliance for cloud-first organizations.

Recorded Future

4.2

cybersecuritythreat-intelligencesecurity

AI-powered threat intelligence platform that analyzes open web, dark web, and technical sources in real-time to provide actionable cybersecurity intelligence for security operations teams.

Bitdefender GravityZone

4.2

endpoint-protectionthreat-detectioncloud-security

Unified enterprise cybersecurity platform combining AI-powered prevention, detection, and response with optional 24/7 managed SOC coverage.

Microsoft Defender for Endpoint

4.4

endpoint-securitythreat-detectionransomware-protection

Cloud-native endpoint security platform delivering AI-powered threat detection and response across Windows, macOS, Linux, iOS, Android, and IoT devices.

Carbon Black

4.4

cybersecurityendpoint-protectionedr

Cloud-native endpoint and workload protection platform providing AI-powered threat detection, prevention, and response for enterprise security, now part of Broadcom.