Boss of the SOC (BOTS) Dataset Version 3 vs Synthetic Adversarial Log Objects (SALO): Side-by-Side Comparison (2026)
Features, pricing, ratings, and pros & cons — compared head-to-head.
Boss of the SOC (BOTS) Dataset Version 3 is a free cyber range training tool. Synthetic Adversarial Log Objects (SALO) is a free cyber range training tool. Compare features, ratings, integrations, and community reviews side by side to find the best cyber range training fit for your security stack.
CST VerdictBased on our analysis of available product data, here is our conclusion:
Boss of the SOC (BOTS) Dataset Version 3
Security teams building internal training programs or running capture-the-flag competitions need Boss of the SOC (BOTS) Dataset Version 3 because it's free, pre-indexed in Splunk, and lets analysts practice on real attack scenarios without licensing friction. The dataset powers thousands of hands-on labs across universities and corporate SOCs; 363 GitHub stars undersells its adoption, but the price point is the real differentiator. Skip this if your team needs guided instruction or if you're not already comfortable running Splunk; BOTS is raw material for people who know what they're doing with it.
Synthetic Adversarial Log Objects (SALO)
Security engineers and detection engineers building detection rules or tuning SIEM logic will find real value in SALO because it generates realistic log data without spinning up test infrastructure or triggering actual alerts. The free price point and 87 GitHub stars suggest active adoption among practitioners who need fast iteration on log-based detections. Skip this if your team lacks in-house log expertise or expects a platform with built-in correlation rules; SALO is a framework for people who want to craft their own synthetic scenarios, not a turnkey detection engine.
