Dorothy vs LogCraft Detection Engineering: side-by-side comparison (2026)

Dorothy: Dorothy is a tool to test monitoring and detection capabilities for Okta environments, with modules mapped to MITRE ATT&CK® tactics.

LogCraft Detection Engineering: Detection-as-code platform for managing detection rules across SIEM/EDR/XDR. Built by LogCraft.

The table above shows where their features, integrations, deployment and company size fit differ.

Dorothy is open-source with 191 GitHub stars. LogCraft Detection Engineering is made by LogCraft. The vendor behind a product decides its roadmap, support, and longevity, so check each company's profile before you commit.

Often, yes. Dorothy and LogCraft Detection Engineering are both Detection Engineering products, and both cover Detection Rules, MITRE ATT&CK. Key differences: Dorothy is Free while LogCraft Detection Engineering is Commercial, Dorothy is open-source. Use the table above to see where features, deployment and company size fit differ.