Exabeam is a cloud SIEM and behavioral analytics platform for security operations teams, sold as New-Scale Fusion on Google Cloud by quote.
Exabeam gathers security logs from across an organization, finds threats in them and gives analysts one place to investigate, with a focus on insider threats from people and from AI agents. It is built by Exabeam of Broomfield, Colorado. LogRhythm merged into Exabeam in a deal completed on 17 July 2024, and the combined company kept the Exabeam name. Exabeam also sells LogRhythm SIEM for on-premises use, while the Exabeam platform itself runs in the cloud. New-Scale Fusion is the cloud platform, combining New-Scale SIEM and New-Scale Analytics in a modular design hosted on Google Cloud. New-Scale SIEM collects data through APIs, agents, syslog and existing data lakes, normalizes it to a Common Information Model at ingestion, and offers a guided wizard for custom parsers. Its Threat Center unifies alerts, cases, detections and watchlists, and analysts manage each case there from start to finish. New-Scale Analytics builds behavioral baselines for human and non-human activity and flags what departs from them, including AI agents through Agent Behavior Analytics. Exabeam Nova adds AI agents: the Search Agent answers plain-language questions about users, hosts and logs, and the Rule Creator Agent converts third-party detection content into Exabeam rules. The platform suits security operations centers that treat insider risk as seriously as outside attacks. Teams that already run a SIEM or a data lake can add New-Scale Analytics on top of it rather than replace what they have. Every edition is bought through the Exabeam sales team after a demo. Analysts use it for threat detection, investigation and response, drawing activity from Microsoft 365, Salesforce and cloud accounts on AWS, Azure and Google Cloud into one investigation. Where Splunk, Microsoft Sentinel or QRadar already holds the logs, New-Scale Analytics adds behavioral detection to that SIEM. When data stays in an external store, New-Scale Fusion runs federated searches across it. Detection engineers check which adversary techniques their rules cover in Outcomes Navigator and close the gaps with converted Sigma rules. Exabeam fits SOC teams for whom a trusted account acting out of pattern, human or AI, is the signal worth chasing first.
Features
- Included: Out-of-the-box log source connectors
- Included: Custom log parser builder
- Included: Normalisation to a common event schema
- Not included: Prebuilt correlation rule library
- Included: Sigma rule import
- Included: User and entity behaviour analytics
- Not included: Risk-based alerting on entity scores
- Included: ATT&CK coverage map of active rules
- Not included: Threat intel indicator matching on ingest
- Not included: Full-text and structured search language
- Not included: Tiered long-term log storage
- Included: Federated search across external stores
- Included: Incident queue with analyst assignment
- Not included: Native automation playbooks in the SIEM
- Included: Compliance report packs for PCI and HIPAA
- Included: Natural-language query assistant
- Not included: Pricing published per GB ingested
- Not included: Self-hosted SIEM deployment
Additional Features
- New-Scale Fusion cloud platform on Google Cloud
- New-Scale SIEM
- New-Scale Analytics behavioral baselines for human and non-human activity
- Agent Behavior Analytics for AI agents
- 7,000+ prebuilt log parsers
- Collectors for API, agent, syslog, SIEM and data lake sources
- Guided wizard for custom log parsers
- Common Information Model normalization at ingestion
Best for
- Security operations centers replacing an older SIEM
- SOC teams adding behavioral analytics to an existing SIEM or data lake
- Security teams watching AI agents alongside human users
- Insider threat programs that need behavior baselines per account
- Detection engineers moving rules over from another SIEM
- Regulated organizations measuring their coverage of PCI DSS and other frameworks
- Teams buying security software through Google Cloud Marketplace
Use cases
- Detecting insider threats from human and AI accounts
- Threat detection, investigation and response across cloud and SaaS logs
- Flagging AI agents that act outside their usual pattern
- Onboarding an unsupported log source with a custom parser
- Working alerts and cases from triage to closure in Threat Center
- Asking plain-language questions about users, hosts and logs
- Converting Sigma and other third-party rules into Exabeam rules
- Checking MITRE ATT&CK coverage and finding detection gaps
- Searching data held in external stores and data lakes
- Adding behavioral analytics on top of Splunk, Microsoft Sentinel or QRadar
- Mapping ingested data to PCI DSS and other compliance frameworks
Screenshots & Videos
Explore Exabeam in action
User Reviews
Compare with Similar Software
Click to compare side by side with Exabeam