TrustRadius: an HG Insights company

FortiSIEM vs. TheHive

Save this comparison

Save this comparison

FortiSIEM

12 Reviews and Ratings

TheHive

2 Reviews and Ratings

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    FortiSIEM

    Score7.4 out of 10
    		N/AFortinet offers security information and event management via FortiSIEM, their product line featuring asset discovery and rapid assessment for location of threat and their remediation.N/A

    TheHive

    Score9.7 out of 10
    Enterprise companies (1,001+ employees)
    		TheHive is an open source and free cybersecurity incident response platform.

    $17,000

    per year per installation

    Pricing
    FortiSIEMTheHive
    Editions & Modules
    No answers on this topic
    TheHive Gold Edition
    Starting from $17.000
    per year per installation
    TheHive Platinum Edition
    Starting from $23.000
    per year per installation
    TheHive Cloud Platform - Large
    Starting from $41.000
    per year per installation
    TheHive Cloud Platform -X Large
    Starting from $48.000
    per year per installation
    TheHive Cloud Platform - Custom
    Starting from $48.000
    per year per installation
    Offerings
    Pricing Offerings
    FortiSIEMTheHive
    Free Trial
    NoYes
    Free/Freemium Version
    NoYes
    Premium Consulting/Integration Services
    NoYes
    Entry-level Setup FeeNo setup fee$5,000 one-time fee per installation
    Additional Details—TheHive Gold and Platinum editions are priced per number of users (seats) and orgnizations (tenants). Our prices start from 1 organization and 5 users.
    More Pricing Information
    Features
    FortiSIEMTheHive
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of FortiSIEM and TheHive
    Feature
    FortiSIEM
    5.3
    1 Ratings
    37% below category average
    TheHive
    -
    Ratings
    Centralized event and log data collection6.01 Ratings00 Ratings
    Correlation7.01 Ratings00 Ratings
    Event and log normalization/management6.01 Ratings00 Ratings
    Deployment flexibility3.01 Ratings00 Ratings
    Custom dashboards and workspaces4.01 Ratings00 Ratings
    Host and network-based intrusion detection6.01 Ratings00 Ratings
    Incident Response Platforms
    Comparison of Incident Response Platforms features of FortiSIEM and TheHive
    Feature
    FortiSIEM
    -
    Ratings
    TheHive
    10.0
    1 Ratings
    13% above category average
    Company-wide Incident Reporting00 Ratings10.01 Ratings
    Integration with Other Security Systems00 Ratings10.01 Ratings
    Centralized Dashboard00 Ratings10.01 Ratings
    Live Response for Rapid Remediation00 Ratings10.01 Ratings
    Best Alternatives
    FortiSIEMTheHive
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    IBM Security QRadar SIEM
    Score9 out of 10
    No answers on this topic
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    No answers on this topic
    All AlternativesView all alternativesView all alternatives
    User Ratings
    FortiSIEMTheHive
    Likelihood to Recommend
    6.0
    (1 ratings)
    10.0
    (1 ratings)
    User Testimonials
    FortiSIEMTheHive
    Likelihood to Recommend
    Fortinet
    If budget is an issue then Fortisiem fits well, as it's more than a typical SIEM solution. It can integrate with environmental monitoring systems, UPS HVAC etc. It can be used as the CMDB solution etc. If fine-tuned and looked after it can actually bring a lot of value for less.
    Incentivized
    Eric V. Zarghami
    Deputy CIO
    Read full review
    StrangeBee
    Managing incident response - it does exactly what it is supposed to do!
    Patrick Green
    Cyber Security and Resilience
    Read full review
    Pros
    Fortinet
    • Log aggregation and analytics
    • CMDB
    • Device inventory and remote management .
    • It can be used by Managed Security Providers who have multiple customers as it offers multi organization support .
    Incentivized
    Eric V. Zarghami
    Deputy CIO
    Read full review
    StrangeBee
    No answers on this topic
    Cons
    Fortinet
    • Non-intuitive/unattractive user interface
    • Too many features that will usually remain unused
    • Very crowded (too many icons) portal
    • The reporting feature is confusing, e.g. you have to click on the "refresh" button to get the result of your inquiry. The report generation process can be much easier, as the user interaction is not pleasant.
    Incentivized
    Eric V. Zarghami
    Deputy CIO
    Read full review
    StrangeBee
    No answers on this topic
    Return on Investment
    Fortinet
    • Other SIEM solutions were cost prohibitive at the time of purchase (2016).
    • Just like any other SIEM, it helped draw a better picture of our current security posture.
    Incentivized
    Eric V. Zarghami
    Deputy CIO
    Read full review
    StrangeBee
    No answers on this topic
    ScreenShots

    TheHive Screenshots

    Screenshot of Alert Management: Go through your dedicated and detailed Alert page, make comments, identify similar Alerts, define custom statuses and fields. Then decide whether or not they should be escalated to investigations or to incident response.Screenshot of Case Management: Create cases and associated tasks and observables. Identify similar cases and alerts, define the PAP (Permissible Actions Protocol) level on each Observable, or improve your Incident Response process using a simple yet powerful template engine.Screenshot of Muti Tenant Environments: Define the different organizations and teams and get them to work in a dedicated or collaborative mode: tenants' cases can be isolated or investigated by users from different organizations based on customizable roles and permissions.Screenshot of User Management: Define and customize user profiles, assign them to users within their organizations and synchronise them via LDAP or AD.Screenshot of Metrics and Dashboards: Compile and correlate statistics on cases, tasks, observables, metrics and more to generate useful KPIs and MBOs with our dynamic dashboard engine.Screenshot of MISP Integration: Get shared Indicators of compromise quickly imported and ready to use or share yours easily with your communities by connecting TheHive with MISP.