Total Products under this Category: 153
Last updated: November 02, 2026
Why You Can Trust G2's Software Rankings:
G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.
Highlighted products: Google Security Operations, CrowdStrike Falcon Endpoint Protection Platform, Palo Alto Cortex XSIAM, Sumo Logic, Huntress Managed SIEM, Todyl Security Platform, ManageEngine ADAudit Plus, and Elastic Security.
Underlying data: [Grid® JSON](https://www.g2.com/categories/security-information-and-event-management-siem/grids.json?focus%5B%5D=google-security-operations&focus%5B%5D=crowdstrike-falcon-endpoint-protection-platform&focus%5B%5D=palo-alto-cortex-xsiam&focus%5B%5D=sumo-logic&focus%5B%5D=huntress-managed-siem&focus%5B%5D=todyl-security-platform&focus%5B%5D=manageengine-adaudit-plus&focus%5B%5D=elastic-elastic-security)
ShieldVision is security software that provides threat detection, investigation, response capabilities, and managed SOC services.
SIEMOC is an integrated Security Information and Event Management (SIEM) solution developed by RISE, designed to provide real-time detection of security threats within minutes. It offers a unified command center that delivers comprehensive visibility into IT infrastructures, enabling organizations to demonstrate compliance, reduce operational costs, and streamline audits, fraud detection, and forensic investigations. Leveraging automation and advanced machine learning algorithms, SIEMOC ensures a high detection rate, making it a robust, scalable, flexible, and cost-effective alternative for high-security sectors such as finance and healthcare. Key Features and Functionality: - Unified Command Center: Provides real-time insights into IT environments, facilitating compliance verification and operational efficiency. - High Detection Rate: Utilizes automation and state-of-the-art machine learning algorithms to identify security threats promptly. - Out-of-the-Box Security Enhancement: Comes with expert-defined correlation rules that trigger automatic alerts for potential security breaches from the outset. - Threat Intelligence Integration: Enhances correlation rules through automatic updates via integrated threat intelligence feeds. - Unlimited Logging: Collects and indexes system and application logs from any source, ensuring comprehensive data coverage. - Real-Time Correlation: Performs real-time log and event correlations through upstream normalization of log data, enabling swift threat detection. Primary Value and User Solutions: SIEMOC addresses the critical need for organizations to detect and respond to security threats in real time, thereby safeguarding sensitive data and maintaining regulatory compliance. By offering a centralized platform for monitoring and analyzing security events, it reduces the complexity and effort associated with audits and forensic investigations. The integration of advanced machine learning algorithms and automation enhances the accuracy and speed of threat detection, providing a reliable solution for industries that require stringent security measures, such as finance and healthcare.
Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.
SIMBUS is a complete privacy and security management software that is designed to help any size facility get and maintain compliance.
SPHERE is the leader in Identity Hygiene. We help companies maintain real-time visibility, achieve least privilege, and automate identity risk mitigation. Organizations struggle with excessive, unmonitored privileges, historical blind spots, and compliance gaps—creating major security and audit risks. SPHERE solves this with SPHEREboard, a purpose-built platform that continuously discovers, analyzes, and remediates identity security risks—with minimal manual effort. By augmenting the foundational capabilities of PAM, IGA, and other identity solutions, SPHERE enforces Identity Hygiene, enabling security teams to effectively identify excessive access, safeguard privileged assets from external threats, and meet compliance mandates —faster and more effectively than ever before.
One platform that replaces fragmented security tools with a single, continuous workflow - where risks get owners, incidents get resolved, compliance runs every day, and AI makes sure nothing stalls in between.
SureLog SIEM (Security Information and Event Management) is a next-generation cybersecurity solution designed to provide advanced threat detection, real-time monitoring, and compliance automation.
Synthient scores any IP address in real time against 400+ proxy and VPN networks, exposing residential proxies, botnets, and commercial VPNs that hide fraud and abuse. Integrate via API, daily feeds, or a streaming firehose.
Average Rating: 4.3/5.0
Total Reviews: 3
"Integrated environment with efficient data sharing"
Rating: 4.5/5.0 stars
— EMIRKAN T.
"Fraud detection is top-notch"
Rating: 4.0/5.0 stars
— Ruth K.
Master the risks and finally tame the unknown with TEHTRIS XDR Platform and its sophisticated technologies for detection and response to security incidents.
SOC Prime operates the world's largest and most advanced platform for detection engineering, transforming how security teams discover, build, and respond to threats through real-time threat intelligence, AI-powered workflows, and advanced detection engineering. The company pioneered tagging Sigma rules with MITRE ATT&CK, enabling security teams to improve coverage of adversary tactics and techniques. Trusted by 11,000+ organizations worldwide, SOC Prime helps security teams anticipate, detect, validate, and respond to cyber threats faster, more efficiently, and with greater precision. SOC Prime's detection intelligence spans 40+ SIEM, EDR/XDR, and Data Lake platforms, with new detections and platform support added on an ongoing basis. Driven by its advanced cybersecurity solutions, Prime Core, Prime Architect, Prime Hunt, and Prime Detect, SOC Prime enables organizations to risk-optimize their cybersecurity posture while improving the ROI of their SOC investments. The SOC Prime Platform consists of the following products: Prime Core empowers security teams with access to a comprehensive library of over 1,000,000+ detection algorithms, enriched with threat intelligence, metadata, expert insights, and AI-driven context. The platform's Active Threats module enables security teams to discover and respond to active threats faster by surfacing detailed threat information, attack insights, and actionable detections generated by both human experts and AI, allowing teams to quickly understand impact and relevance. Prime Architect is built for autonomous, threat-informed workflows, powered by AI. The AI-assisted workspace brings together threat research, investigation, and detection engineering in a single environment, where security teams can leverage the AI agent through custom prompts or Agentic AI tools purpose-built for detection engineering and threat research. Generate Sigma rules from threat intelligence, refine detection logic, visualize attack flows, and translate detections across multiple security platforms. Prime Architect helps security teams move faster from threat intelligence to deployment-ready detections. Prime Hunt enables security professionals to audit their MITRE ATT&CK coverage, identify blind spots, automate threat search across environment, and prioritize logging of critical security signals. Using AI to correlate events surfaced through this search, Prime Hunt infers attack chains, enabling searches of potential attack patterns to determine whether newly identified threats had previously existed in the environment. By leveraging Prime Hunt, SOC teams can focus directly on incident investigation rather than analyzing overwhelming volumes of alerts, and validate adversary TTPs against stored log sources in a matter of hours. Prime Detect runs thousands of Sigma rules directly on streaming events before data reaches the SIEM, with real-time visibility and in-flight tagging and enrichment. Using AI, Prime Detect correlates real-time event streams against newly identified threats to form attack chains, surfacing potential attack sequences.
TotalHeal LogIntelligence is the SIEM & Log Management product of TotalHeal, the security platform made in India by Freaquer Corporation Private Limited. Collect, search and keep logs from firewalls, servers and applications. It is managed from the TotalHeal console together with the other TotalHeal products, under one account and one bill. TotalHeal is available as a cloud service and for on-premises deployment. Every organisation can start a 30-day free trial from the console.
Trickest provides an innovative approach to offensive cybersecurity automation, assets, and vulnerability discovery. The platform combines extensive adversary tactics and techniques with full transparency, hypercustomization, and hyperscalability, making it the go-to platform for offensive security operations. The Trickest platform comes with comprehensive tooling, scripting, managed infrastructure, scaling, ready-to-go solutions, and analytics, serving as a collaborative command center for Offensive Security, Penetration testing, Red teams, Security Analysts, and Security Service providers (MSSPs). What makes us different? Easy customization of logic, inputs, outputs, and integrations, making them adaptable to specific needs and thus producing superior-quality data compared to others. Some of the automation workflows and solutions that our customers deploy and execute: - Attack Surface Discovery - Vulnerability Scanning - Dynamic Application Security Testing (DAST) - Recon/Information Gathering (Passive & Active) - Organization OSINT - CVE scanning - Cloud Scanning - DNS recon & research - Subdomain Enumeration - Subdomain Takeover - Custom Security Automation and Orchestration Main components of the Trickest platform include: Solutions & Analytics - Ready-to-go and transparent solutions for Attack Surface Discovery, Vulnerability Scanning, Dynamic Application Security Testing (DAST), and Open-source intelligence OSINT, offering insight into every step of the process, easy customization, and Analytics on the top. The Builder - Access to 90+ workflow templates, 300+ open-source tools, Bash & Python scripting, CLI for building custom workflows to discover asset, vulnerabilities, scan network & apps, crawl, spider, enumerate, fuzz, bruteforce and much more. Hyperscalability - Whether scanning regional infrastructures with 100s of 1000s of assets or smaller organizational scopes, Trickest supports it all without per-asset costs.
Trunc is a Security Information and Event Management (SIEM) and log management platform. It helps organizations recognize potential issues and security threats by collecting, aggregating and analyzing all logs in one platform. It makes the process more seamless through its intuitive user interface, Google like search functionality, and modern alerting capabilities. It is technology agnostic solution with support for the most popular cloud services (i.e., Azure, Google Cloud), and all Operating Systems (i.e., Windows, Linux, MacOS). With Trunc you can quickly satisfy compliance requirements as defined by HIPAA, PCI DSS, FISMA and a number of other regulatory bodies.
