Best SIEM Tools

Compare SIEM tools on user reviews: ingest cost at volume, detection rule quality, search speed, tuning effort and analyst experience.

3 products

Exabeam
Exabeam

by Exabeam

No reviews yet

Exabeam is a cloud SIEM and behavioral analytics platform for security operations teams, sold as New-Scale Fusion on Google Cloud by quote.

Features

Has Out-of-the-box log source connectors
Has Custom log parser builder
Has Normalisation to a common event schema
Missing Prebuilt correlation rule library
Has Sigma rule import
Has User and entity behaviour analytics
Missing Risk-based alerting on entity scores
Has ATT&CK coverage map of active rules
Missing Threat intel indicator matching on ingest
Missing Full-text and structured search language
Missing Tiered long-term log storage
Has Federated search across external stores
Has Incident queue with analyst assignment
Missing Native automation playbooks in the SIEM
Has Compliance report packs for PCI and HIPAA
Has Natural-language query assistant
Missing Pricing published per GB ingested
Missing Self-hosted SIEM deployment
Visit Profile
Microsoft Sentinel

by Microsoft

No reviews yet

Microsoft Sentinel is Microsoft's cloud-native SIEM for SOC teams on Azure, with KQL hunting, UEBA and a security data lake, billed per gigabyte ingested.

Features

Has Out-of-the-box log source connectors
Has Custom log parser builder
Has Normalisation to a common event schema
Has Prebuilt correlation rule library
Missing Sigma rule import
Has User and entity behaviour analytics
Missing Risk-based alerting on entity scores
Has ATT&CK coverage map of active rules
Has Threat intel indicator matching on ingest
Has Full-text and structured search language
Has Tiered long-term log storage
Has Federated search across external stores
Has Incident queue with analyst assignment
Has Native automation playbooks in the SIEM
Has Compliance report packs for PCI and HIPAA
Missing Natural-language query assistant
Has Pricing published per GB ingested
Missing Self-hosted SIEM deployment
Visit Profile
Securonix
Securonix

by Securonix

No reviews yet

Securonix Unified Defense SIEM is a cloud-native SIEM with UEBA, SOAR and threat intelligence in one platform, for enterprise SOCs and MSSPs. Sold by quote.

Features

Has Out-of-the-box log source connectors
Missing Custom log parser builder
Missing Normalisation to a common event schema
Has Prebuilt correlation rule library
Missing Sigma rule import
Has User and entity behaviour analytics
Missing Risk-based alerting on entity scores
Missing ATT&CK coverage map of active rules
Missing Threat intel indicator matching on ingest
Missing Full-text and structured search language
Missing Tiered long-term log storage
Missing Federated search across external stores
Missing Incident queue with analyst assignment
Has Native automation playbooks in the SIEM
Missing Compliance report packs for PCI and HIPAA
Has Natural-language query assistant
Missing Pricing published per GB ingested
Missing Self-hosted SIEM deployment
Visit Profile
0 selected