Best Anomaly Detection Software in 2026
Updated
In short: OpenSearch is ranked #1 of 19 as of 4 October 2026, ahead of Metaplane and ObservabilityOS. The best-ranked option with a free plan is Metaplane. The lowest first paid tier on this page is ManageEngine NetFlow Analyzer at $172/mo.
Unusual patterns can matter in logs, metrics, transactions, or other monitored data, so anomaly detection tools differ in what they watch and how they flag changes. Compared on detection method, real-time detection, supported data, and anomaly explanations, the entries give you several angles for assessing how a tool may fit your monitoring work. Data retention and deployment options add operational context; free-plan availability and paid-from pricing help you weigh access and cost. OpenSearch, Metaplane, and ObservabilityOS are among the named options to examine. Start with the data you need to monitor, then consider whether the listed detection and explanation details match how you investigate anomalies.
19 anomaly detection software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
Recognised 40% · Phone app 26% · Documented 20% · Free plan 14% of the score
- 1 OpenSearch No phone app RecognisedPhone appDocumentedFree plan 7.8Free
- 2 Metaplane No phone app RecognisedPhone appDocumentedFree plan 7.8Free Detection method: machine-learningReal-time detection: YesSupported data: row counts, freshness, schemas, column counts, cardinality, uniqueness, nullness, numeric statistics, custom SQL
- 3 ObservabilityOS No phone app RecognisedPhone appDocumentedFree plan 7.7$292,499/mo Detection method: hybridReal-time detection: YesSupported data: logs, metrics, traces
- 4 PyOD No phone app RecognisedPhone appDocumentedFree plan 7.7Free Detection method: hybridReal-time detection: YesSupported data: tabular, time series, graph, text, image, audio
- 5 ManageEngine NetFlow Analyzer iPhone + Android RecognisedPhone appDocumentedFree plan 7.6$172/mo
- 6 Anomalib No phone app RecognisedPhone appDocumentedFree plan 7.4Free Detection method: machine-learningSupported data: images, videos
- 7 Anodot No phone app RecognisedPhone appDocumentedFree plan 7.0
- 8 Anomalo No phone app RecognisedPhone appDocumentedFree plan 7.0 Detection method: machine-learningSupported data: structured, semi-structured, unstructured, tables, documents
- 9 Corelight Open NDR No phone app RecognisedPhone appDocumentedFree plan 6.8 Detection method: hybridReal-time detection: YesSupported data: network traffic, packet data, flow logs, cloud network traffic, protocol logs, files
- 10 Soda No phone app RecognisedPhone appDocumentedFree plan 6.6$750/mo
- 11 ExtraHop RevealX No phone app RecognisedPhone appDocumentedFree plan 6.4 Detection method: hybridReal-time detection: YesSupported data: network packets, applications, transactions, devices, users, identities, services, and network metadata
- 12 Securonix UEBA No phone app RecognisedPhone appDocumentedFree plan 6.4
- 13 PySAD No phone app RecognisedPhone appDocumentedFree plan 6.2Free Detection method: hybridReal-time detection: YesSupported data: univariate data; multivariate data; streaming data
- 14 OpenUBA No phone app RecognisedPhone appDocumentedFree plan 6.0 Detection method: hybridReal-time detection: YesSupported data: Elasticsearch, Apache Spark, CSV
- 15 Darktrace / EMAIL No phone app RecognisedPhone appDocumentedFree plan 6.0
- 16 Axomaly No phone app RecognisedPhone appDocumentedFree plan 6.0Free Detection method: statisticalSupported data: Timestamped time-series values, optional metadata, business metrics, operational metrics, application metrics
- 17 Cisco Catalyst Center No phone app RecognisedPhone appDocumentedFree plan 5.6
- 18 Progress Flowmon No phone app RecognisedPhone appDocumentedFree plan 5.4
- 19 Vectra AI Identity Threat Detection and Response No phone app RecognisedPhone appDocumentedFree plan 5.3
Compare all 19 in a table
| # | App | Score | Free plan | From | Free plan | Paid from | Detection method | Real-time detection |
|---|---|---|---|---|---|---|---|---|
| 1 | OpenSearch | 7.8 | Free plan | Free | — | — | — | — |
| 2 | Metaplane | 7.8 | Free plan | Free | Yes | — | machine-learning | Yes |
| 3 | ObservabilityOS | 7.7 | Free plan | $292,499/mo | Yes | 29 /mo | hybrid | Yes |
| 4 | PyOD | 7.7 | Free plan | Free | Yes | — | hybrid | Yes |
| 5 | ManageEngine NetFlow Analyzer | 7.6 | Free plan | $172/mo | Yes | — | — | — |
| 6 | Anomalib | 7.4 | Free plan | Free | — | — | machine-learning | — |
| 7 | Anodot | 7.0 | No | — | — | — | — | — |
| 8 | Anomalo | 7.0 | No | — | — | — | machine-learning | — |
| 9 | Corelight Open NDR | 6.8 | No | — | — | — | hybrid | Yes |
| 10 | Soda | 6.6 | Free plan | $750/mo | Yes | 750 /mo | — | — |
| 11 | ExtraHop RevealX | 6.4 | No | — | — | — | hybrid | Yes |
| 12 | Securonix UEBA | 6.4 | No | — | — | — | — | — |
| 13 | PySAD | 6.2 | Free plan | Free | Yes | — | hybrid | Yes |
| 14 | OpenUBA | 6.0 | No | — | — | — | hybrid | Yes |
| 15 | Darktrace / EMAIL | 6.0 | No | — | No | — | — | — |
| 16 | Axomaly | 6.0 | Free plan | Free | — | — | statistical | — |
| 17 | Cisco Catalyst Center | 5.6 | No | — | — | — | — | — |
| 18 | Progress Flowmon | 5.4 | No | — | No | — | — | — |
| 19 | Vectra AI Identity Threat Detection and Response | 5.3 | No | — | — | — | — | — |
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which anomaly detection software is ranked first on Samsung Mobile US Press?
OpenSearch is ranked #1 of 19 with a score of 7.8. Metaplane is second and ObservabilityOS third.
How many of these have a free plan?
9 of the 19 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, ManageEngine NetFlow Analyzer has the lowest first paid tier we found: $172/mo.
How is this list ranked?
Ranked mobile-first: a phone app alongside the web or desktop product, a free tier and the depth of its documentation. Paid placements never change a rank.