Best Security Information and Event Management (SIEM) Software Solutions - Page 3

How Many Security Information and Event Management (SIEM) Software Products Does G2 Track?

Total Products under this Category: 153

Category Stats (Nov 2026)

  • Average Rating: 4.47/5 (↑0.01 vs Oct 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Singularity AI SIEM (+2.27%) - Among all products in this category, Singularity AI SIEM recorded the largest rating increase compared to last month

Last updated: November 02, 2026

How Does G2 Rank Security Information and Event Management (SIEM) Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 6,600+ Authentic Reviews
  • 153+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Security Information and Event Management (SIEM) Software

G2 Grid® for Security Information and Event Management (SIEM) Software plotting products by satisfaction and market presence

Highlighted products: Google Security Operations, CrowdStrike Falcon Endpoint Protection Platform, Palo Alto Cortex XSIAM, Sumo Logic, Huntress Managed SIEM, Todyl Security Platform, ManageEngine ADAudit Plus, and Elastic Security.

Underlying data: [Grid® JSON](https://www.g2.com/categories/security-information-and-event-management-siem/grids.json?focus%5B%5D=google-security-operations&focus%5B%5D=crowdstrike-falcon-endpoint-protection-platform&focus%5B%5D=palo-alto-cortex-xsiam&focus%5B%5D=sumo-logic&focus%5B%5D=huntress-managed-siem&focus%5B%5D=todyl-security-platform&focus%5B%5D=manageengine-adaudit-plus&focus%5B%5D=elastic-elastic-security)

Check Point SmartEvent Event Management

SmartEvent event management provides full threat visibility with a single view into security risks. Take control and command the security event through real-time forensic and event investigation, compliance, and reporting. Respond to security incidents immediately and gain network true insights. Features include: integrated threat management, single view into security risks, customizable views and reports, full threat visibility, and real-time forensic and event investigation.

Average Rating: 4.4/5.0

Total Reviews: 13

How Do G2 Users Rate Check Point SmartEvent Event Management?

  • Activity Monitoring: 8.3/10 (Category avg: 9.2/10)
  • Data Examination: 8.0/10 (Category avg: 8.7/10)
  • Ease of Use: 9.0/10 (Category avg: 8.8/10)
  • Log Management: 8.3/10 (Category avg: 9.2/10)

Who Is the Company Behind Check Point SmartEvent Event Management?

Who Uses This Product?

  • Company Size: 69% Large, 23% Medium

What Do G2 Reviewers Say About Check Point SmartEvent Event Management?

AI-generated summary from verified user reviews

Pros
  • Users value the full threat visibility of Check Point SmartEvent, enabling quick and informed responses to security risks.
  • Users appreciate the full threat visibility provided by SmartEvent, enabling quick responses to security risks easily.
  • Users value the effective alerting system of SmartEvent, providing clarity and context for quick responses.
  • Users appreciate the ease of use of Check Point SmartEvent, enabling quick and focused responses to network events.
  • Users value effective monitoring in SmartEvent, allowing quick response to relevant events without unnecessary clutter.
Cons
  • Users find the initial setup to have a steep learning curve, making the experience feel overwhelming at times.
  • Users face deployment difficulties with random CPSEMD process terminations, causing login failures and high CPU usage in SmartEvent.
  • Users experience difficult learning due to random CPSEMD terminations causing login failures and high CPU usage in SmartEvent GUI.
  • Users find the initial learning curve steep, making it challenging to filter data effectively and receive relevant alerts.
  • Users experience setup difficulties with Check Point SmartEvent, including random process terminations and high CPU usage issues.

What Are Recent G2 Reviews of Check Point SmartEvent Event Management?

What Are G2 Users Discussing About Check Point SmartEvent Event Management?

Cisco Security Manager

Advanced Security Manager is a computer security software that secures information from unwanted intruders in a computer.

Average Rating: 4.3/5.0

Total Reviews: 21

How Do G2 Users Rate Cisco Security Manager?

  • Activity Monitoring: 8.5/10 (Category avg: 9.2/10)
  • Data Examination: 8.0/10 (Category avg: 8.7/10)
  • Ease of Use: 8.8/10 (Category avg: 8.8/10)
  • Log Management: 8.6/10 (Category avg: 9.2/10)

Who Is the Company Behind Cisco Security Manager?

  • Seller: Cisco
  • Year Founded: 1984
  • HQ Location: San Jose, CA
  • LinkedIn® Page: www.linkedin.com
    95,294 employees on LinkedIn®
  • Ownership: NASDAQ:CSCO
  • Phone: 847-678-6600

Who Uses This Product?

  • Company Size: 52% Large, 43% Medium

What Are Recent G2 Reviews of Cisco Security Manager?

NetWitness Platform

NetWitness is a comprehensive threat detection, investigation and response platform that combines visibility, analytics, insight, and automation into a single solution. It collects and analyzes data across all capture points (logs, packets, netflow, endpoint and IoT) and computing platforms (physical, virtual and cloud), enriching data with threat intelligence and business context.

Average Rating: 3.9/5.0

Total Reviews: 23

How Do G2 Users Rate NetWitness Platform?

  • Activity Monitoring: 8.3/10 (Category avg: 9.2/10)
  • Data Examination: 8.3/10 (Category avg: 8.7/10)
  • Ease of Use: 7.7/10 (Category avg: 8.8/10)
  • Log Management: 8.6/10 (Category avg: 9.2/10)

Who Is the Company Behind NetWitness Platform?

Who Uses This Product?

  • Company Size: 54% Large, 33% Medium

What Do G2 Reviewers Say About NetWitness Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the ability to capture full network packets for deep forensic investigation, enhancing their analytic capabilities.
  • Users value the centralized threat detection capabilities of NetWitness, enhancing efficiency in threat hunting across various data sources.
  • Users value the centralized management of NetWitness Platform, which simplifies threat hunting across various data sources.
  • Users appreciate the centralized threat hunting capabilities of the NetWitness Platform, reducing tool sprawl and enhancing security efficiency.
  • Users value the packet capture and replay capabilities of NetWitness Platform for in-depth forensic investigations.
Cons
  • Users find the complex implementation of NetWitness Platform challenging, needing expert skills for initial setup and upgrades.
  • Users face complexity in initial setup and upgrades with NetWitness Platform, requiring significant technical expertise and stability concerns.
  • Users face a complex setup for the NetWitness Platform, often needing extensive technical expertise for deployment and upgrades.
  • Users face deployment difficulties with the NetWitness Platform, often requiring advanced technical skills and experiencing upgrade instability.
  • Users find the expertise required for initial setup and upgrades complex, leading to deployment challenges.

What Are Recent G2 Reviews of NetWitness Platform?

What Are G2 Users Discussing About NetWitness Platform?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

Pandora FMS

Pandora FMS is a unified monitoring and observability platform designed to consolidate visibility, alerting, reporting, and automation across heterogeneous IT environments. Instead of combining multiple point tools for networks, servers, applications, and cloud services, Pandora FMS centralizes data collection and operational workflows in a single console, reducing integration effort and operational complexity in on-premise, hybrid, and multi-cloud architectures. The platform collects telemetry using multiple methods, including agents, remote checks, standard protocols (e.g., SNMP/WMI), APIs, and log/event ingestion. This enables teams to monitor infrastructure and services end-to-end, correlate signals, and maintain consistent alerting policies and dashboards across distributed estates. Pandora FMS also supports capacity and trend analysis to anticipate resource constraints and identify recurring patterns, and includes AI-assisted capabilities for anomaly detection and automated thresholds to surface hard-to-spot operational signals. Pandora FMS is extensible through a large plugin ecosystem (500+ plugins and integrations), covering a wide range of enterprise and infrastructure technologies such as SAP, Oracle, Citrix, JBoss, VMware, AWS, SQL Server, Red Hat, and WebSphere. This extensibility helps organizations standardize monitoring across legacy and modern stacks without redesigning their monitoring approach per technology. Core capabilities: -Unified monitoring for networks, servers, applications, cloud services, endpoints, and logs -Centralized alerting, event correlation, dashboards, and scheduled reporting -Flexible data collection via agents, remote checks, APIs, and plugins -Scalability for distributed environments and large numbers of monitored elements -Analytics for trend/capacity planning plus AI-assisted anomaly detection and dynamic thresholds -A key differentiator is direct vendor support, which simplifies escalation and ensures continuity of expertise for deployment, tuning, and ongoing operations.

Average Rating: 4.6/5.0

Total Reviews: 226

How Do G2 Users Rate Pandora FMS?

  • Activity Monitoring: 10.0/10 (Category avg: 9.2/10)
  • Data Examination: 8.3/10 (Category avg: 8.7/10)
  • Ease of Use: 9.1/10 (Category avg: 8.8/10)
  • Log Management: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind Pandora FMS?

  • Seller: Pandora FMS
  • Company Website:
  • Year Founded: 2004
  • HQ Location: Madrid, Spain
  • LinkedIn® Page: www.linkedin.com
    56 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Data Analyst
  • Top Industries: Information Technology and Services, Telecommunications
  • Company Size: 50% Medium, 37% Small

What Do G2 Reviewers Say About Pandora FMS?

AI-generated summary from verified user reviews

Pros
  • Users value the reliable remote monitoring capabilities of Pandora FMS, ensuring seamless oversight of their systems.
  • Users enjoy the ease of use of Pandora FMS, appreciating its intuitive interface and reliable support.
  • Users value the real-time monitoring capabilities of Pandora FMS, enhancing visibility of all network devices effortlessly.
  • Users value the flexibility and adaptability of Pandora FMS, making it suitable for diverse IT monitoring needs.
  • Users value the versatility of network monitoring in Pandora FMS, effectively managing diverse devices and environments.
Cons
  • Users find the learning curve steep, particularly with initial setup and complex functionalities of Pandora FMS.
  • Users find the complex setup of Pandora FMS challenging, particularly due to compatibility issues and steep learning curves.
  • Users note the learning difficulty with Pandora FMS, especially for those lacking technical expertise for setup and configuration.
  • Users face a difficult learning curve with Pandora FMS, which can hinder effective usage for beginners.
  • Users find the complex configuration of Pandora FMS challenging, especially without extensive technical expertise.

What Are Recent G2 Reviews of Pandora FMS?

What Are G2 Users Discussing About Pandora FMS?

LevelBlue USM Anywhere

LevelBlue USM Anywhere is a cloud-based security management solution that accelerates and centralizes threat detection, incident response, and compliance management for your cloud, hybrid cloud, and on-premises environments. USM Anywhere includes purpose-built cloud sensors that natively monitor your Amazon Web Services (AWS) and Microsoft Azure cloud environments. On premises, lightweight virtual sensors run on Microsoft Hyper-V and VMware ESXi to monitor your virtual private cloud and physical IT infrastructure. With USM Anywhere, you can rapidly deploy sensors into your cloud and on-premises environments while centrally managing data collection, security analysis, and threat detection from the AlienVault Secure Cloud. Five Essential Security Capabilities in a Single SaaS Platform AlienVault USM Anywhere provides five essential security capabilities in a single SaaS solution, giving you everything you need for threat detection, incident response, and compliance management—all in a single pane of glass. With USM Anywhere, you can focus on finding and responding to threats, not managing software. An elastic, cloud-based security solution, USM Anywhere can readily scale to meet your threat detection needs as your hybrid cloud environment changes and grows. 1. Asset Discovery 2. Vulnerability Assessment 3. Intrusion Detection 4. Behavioral Monitoring 5. SIEM

Average Rating: 4.4/5.0

Total Reviews: 102

How Do G2 Users Rate LevelBlue USM Anywhere?

  • Activity Monitoring: 8.9/10 (Category avg: 9.2/10)
  • Data Examination: 8.4/10 (Category avg: 8.7/10)
  • Ease of Use: 8.3/10 (Category avg: 8.8/10)
  • Log Management: 8.9/10 (Category avg: 9.2/10)

Who Is the Company Behind LevelBlue USM Anywhere?

Who Uses This Product?

  • Top Industries: Information Technology and Services, Financial Services
  • Company Size: 62% Medium, 20% Small

What Are Recent G2 Reviews of LevelBlue USM Anywhere?

What Are G2 Users Discussing About LevelBlue USM Anywhere?

Adlumin

Adlumin, an N-able Company, provides enterprise-grade cybersecurity for organizations of all sizes through its innovative Security Operations as a Service platform. With an agnostic approach, the Adlumin platform seamlessly integrates with existing tech stacks, and its flexible management options enable it to be self-managed by an internal team, or fully managed by Adlumin experts. The Adlumin platform stops cyber threats early with deep learning models tailored to each environment. It maximizes resource efficiency by optimizing existing technology and streamlining workflows across teams. Adlumin transforms risk into resilience by identifying and addressing vulnerabilities, while cybersecurity experts proactively uncover and neutralize threats before they can do damage. Adlumin empowers organizations to take control of their digital security making advanced protection accessible to all.

Average Rating: 4.7/5.0

Total Reviews: 65

How Do G2 Users Rate Adlumin?

  • Activity Monitoring: 9.7/10 (Category avg: 9.2/10)
  • Data Examination: 9.2/10 (Category avg: 8.7/10)
  • Ease of Use: 9.0/10 (Category avg: 8.8/10)
  • Log Management: 9.5/10 (Category avg: 9.2/10)

Who Is the Company Behind Adlumin?

  • Seller: N-able
  • Company Website:
  • HQ Location: Morrisville, North Carolina
  • LinkedIn® Page: www.linkedin.com
    2,307 employees on LinkedIn®
  • Ownership: NYSE: NABL

Who Uses This Product?

  • Top Industries: Financial Services, Information Technology and Services
  • Company Size: 56% Medium, 23% Small

What Do G2 Reviewers Say About Adlumin?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the detailed analytic reports of Adlumin, highlighting its reliability and user-friendly interface.
  • Users value the detailed analytic reports of Adlumin for their reliability and user-friendly interface.
  • Users appreciate the detailed analytic reports from Adlumin, enhancing reliability and ease of use.
  • Users praise the ease of management with Adlumin, appreciating its reliable and user-friendly interface.
  • Users praise the ease of use of Adlumin, highlighting its reliability and detail in analytic reports.
Cons
  • Users feel that the customer support for Adlumin is adequate but has room for improvement.

What Are Recent G2 Reviews of Adlumin?

Exabeam New-Scale Platform

The Exabeam New-Scale Security Operations Platform is built to help organizations detect, investigate, and respond to insider threats tied to both human users and non-human identities. It brings together behavioral analytics, automation, and AI-driven workflows to help security operations teams reduce risk and maintain operational integrity. The platform supports AI agent-powered threat detection, investigation, and response (TDIR) by automating high-friction tasks and applying behavioral context to every signal. By combining proactive risk identification with fast, guided response, the New-Scale Platform helps teams move from alert handling to informed decision-making. Designed for enterprise security operations teams, the New-Scale Platform supports organizations that need consistent visibility into internal risk without adding operational overhead. Analysts use behavioral analytics to understand what is normal for a user or agent, then quickly spot meaningful deviations. This approach is especially valuable in data-sensitive industries such as finance, healthcare, and technology, where internal misuse, compromised credentials, or agent misuse can create immediate business impact. At the core of the New-Scale Platform is advanced behavioral analytics. The platform analyzes activity patterns across identities, devices, and services to establish baselines of normal behavior. When activity deviates from those baselines, dynamic risk scoring helps security teams focus on the activity most likely to indicate misuse or compromise. This reduces alert noise and shortens the time it takes to understand what is happening and why. The New-Scale Platform also extends user and entity behavior analytics (UEBA) to non-human identities through Agent Behavior Analytics (ABA). ABA applies the same behavior-based approach as UEBA to service accounts, APIs, automation tools, and AI agents. By monitoring how agents typically interact with data and systems, the platform helps teams detect misuse, drift, or compromise that traditional controls often miss. Automation plays a central role in improving day-to-day operations. The New-Scale Platform automates investigation steps, enrichment, and response actions within TDIR workflows, allowing analysts to spend less time on repetitive tasks and more time validating risk and containing incidents. Behavioral context and AI-driven prioritization help teams address the most relevant threats first, improving response consistency without increasing workload. With the Exabeam New-Scale Platform, security teams can benchmark and prove the value of their security program against peers and measurable outcomes. Outcomes Navigator translates raw security data into business-relevant insights to demonstrate progress against the most strategic use cases, MITRE ATT&CK TTPs, and compliance initiatives. Together, user and entity behavior analytics (UEBA), Agent Behavior Analytics (ABA), and agent-powered automated TDIR workflows help security operations teams detect insider risk earlier, investigate faster, and respond with greater precision. The New-Scale Platform gives organizations a practical way to manage insider threats tied to people and agents, accelerate security operations, and prove security impact over time.

Average Rating: 4.6/5.0

Total Reviews: 15

How Do G2 Users Rate Exabeam New-Scale Platform?

  • Activity Monitoring: 9.0/10 (Category avg: 9.2/10)
  • Data Examination: 9.2/10 (Category avg: 8.7/10)
  • Ease of Use: 9.1/10 (Category avg: 8.8/10)
  • Log Management: 9.2/10 (Category avg: 9.2/10)

Who Is the Company Behind Exabeam New-Scale Platform?

  • Seller: Exabeam
  • Company Website:
  • Year Founded: 2013
  • HQ Location: Broomfield, CO
  • LinkedIn® Page: www.linkedin.com
    785 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 56% Large, 31% Medium

What Do G2 Reviewers Say About Exabeam New-Scale Platform?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Exabeam New-Scale Platform, benefiting from its seamless integrations and automation.
  • Users commend the detection accuracy of Exabeam New-Scale Platform, enhancing their ability to identify threats effectively.
  • Users appreciate the rich features and ease of integration offered by the Exabeam New-Scale Platform for security.
  • Users value the world-class UBEA features and comprehensive security tools of Exabeam New-Scale Platform.
  • Users value the automation capabilities of Exabeam, enhancing response efficiency and reducing manual investigation efforts.
Cons
  • Users find the complexity of the Exabeam New-Scale Platform challenging, especially during setup and configuration.
  • Users find the complex setup of Exabeam New-Scale Platform challenging, often requiring significant expertise for configuration.
  • Users find the difficult setup of Exabeam New-Scale Platform challenging, requiring significant expertise for effective management.
  • Users find the parsing issues in Exabeam New-Scale Platform challenging, impacting user-friendliness and efficiency.
  • Users find the software complexity of Exabeam New-Scale Platform challenging, requiring significant expertise for effective management.

What Are Recent G2 Reviews of Exabeam New-Scale Platform?

What Are G2 Users Discussing About Exabeam New-Scale Platform?

Graylog

SIEM and log management in one platform Graylog helps security and IT teams detect, investigate, and respond to threats faster, using explainable AI and real-time data correlation to turn large volumes of log data into decisions they can act on. More than 60,000 organizations worldwide use Graylog for visibility and control over their IT environments. The problem Security analysts and IT professionals spend their days sifting through vast amounts of log data to find the anomalies that matter, track incidents, and prove compliance with regulatory standards. Most of that data is noise. -Too many alerts that do not matter, and the one that does is buried. -Forensic evidence scattered across tools, so investigations stall. -Audit documentation assembled by hand the week before the deadline. Catch the patterns rules miss Anomaly detection flags unusual patterns in your data so your team sees behavior that signature-based rules leave in the blind spot. Real-time correlation connects related events as they arrive. Investigations that build themselves Guided investigations walk analysts through complex incidents. Automated workflows handle the repetitive tasks, and AI-driven summaries surface the affected assets, the incident timeline, and the high-priority findings. Analysts focus on what matters instead of excessive data. Work the alerts that matter first Risk scores rank each alert by the severity of what fired and the importance of the assets involved, so a port scan against a database of client PII outranks the same scan against a user laptop. With centralized log management, every log stays a single log, giving your team the historic evidence to complete forensic investigations in one place. One platform, three products Graylog fits the team you have: -Graylog Open for log management on an open foundation. -Graylog Enterprise for IT operations and log management at scale. -Graylog Security for detection, investigation, and response.

Average Rating: 4.4/5.0

Total Reviews: 115

How Do G2 Users Rate Graylog?

  • Activity Monitoring: 8.7/10 (Category avg: 9.2/10)
  • Data Examination: 8.3/10 (Category avg: 8.7/10)
  • Ease of Use: 8.4/10 (Category avg: 8.8/10)
  • Log Management: 9.1/10 (Category avg: 9.2/10)

Who Is the Company Behind Graylog?

  • Seller: Graylog
  • Company Website:
  • Year Founded: 2009
  • HQ Location: Houston, US
  • LinkedIn® Page: www.linkedin.com
    124 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 42% Medium, 34% Small

What Do G2 Reviewers Say About Graylog?

AI-generated summary from verified user reviews

Pros
  • Users value the cost optimization of Graylog, finding it reliable and compliant with industry standards.
  • Users find the detailed API information essential for effective debugging, enhancing their daily workflow significantly.
  • Users find the detailed API information invaluable for effective debugging, preventing potential dead ends in troubleshooting.
  • Users find the detailed API information provided by Graylog extremely helpful for effective debugging processes.
  • Users praise Graylog for its reliable and cost-effective pricing, aligning well with industry standards and needs.
Cons
  • Users find Graylog's complexity frustrating, as it often leads to wasted time during debugging and review processes.
  • Users face debugging difficulties with Graylog, often leading to wasted time and frustration during troubleshooting.
  • Users experience difficulties with integration issues, limiting the compatibility of Graylog with other platforms.
  • Users find the learning curve to be challenging, leading to time wasted instead of efficient debugging and reviews.
  • Users experience time consumption with Graylog, finding that it complicates workflows and wastes valuable debugging time.

What Are Recent G2 Reviews of Graylog?

What Are G2 Users Discussing About Graylog?

ConnectWise SIEM

Designed for MPS, ConnectWise SIEM is a cutting-edge platform that harnesses the power of advanced security information and event management (SIEM) to provide unparalleled visibility and protection for businesses. With its robust multi-tenancy capabilities, ConnectWise SIEM allows IT Service Providers to efficiently manage security operations across multiple clients or departments from a single interface. By seamlessly integrating with the ConnectWise Security Operations Center (SOC), this platform enables users to leverage expert insights and resources to proactively detect and respond to security threats, ensuring comprehensive protection and peace of mind for businesses of all sizes. The core features of ConnectWise SIEM include: 1. Real-time Threat Detection: ConnectWise SIEM continuously monitors network activity to detect and alert on potential security threats in real-time. 2. Log Management: The platform collects, normalizes, and analyzes log data from various sources to provide a comprehensive view of the organization's security posture. 3. Incident Response: ConnectWise SIEM facilitates rapid incident response by providing automated workflows and playbooks for handling security incidents effectively. 4. Compliance Reporting: The platform helps organizations meet regulatory compliance requirements by generating reports and audits to demonstrate adherence to security standards. 5. Threat Intelligence Integration: ConnectWise SIEM integrates with threat intelligence feeds to enhance threat detection capabilities and stay ahead of emerging cyber threats. 6. Multi-Tenancy Support: The platform offers multi-tenancy support, allowing Managed Service Providers (MSPs) to manage security operations for multiple clients from a single interface. 7. ConnectWise SOC Integration: ConnectWise SIEM seamlessly integrates with the ConnectWise Security Operations Center (SOC) to leverage expert insights and resources for enhanced security monitoring and response.

Average Rating: 4.3/5.0

Total Reviews: 20

How Do G2 Users Rate ConnectWise SIEM?

  • Activity Monitoring: 8.9/10 (Category avg: 9.2/10)
  • Data Examination: 8.3/10 (Category avg: 8.7/10)
  • Ease of Use: 8.2/10 (Category avg: 8.8/10)
  • Log Management: 8.8/10 (Category avg: 9.2/10)

Who Is the Company Behind ConnectWise SIEM?

  • Seller: ConnectWise
  • Company Website:
  • Year Founded: 1982
  • HQ Location: Tampa, FL
  • LinkedIn® Page: www.linkedin.com
    3,401 employees on LinkedIn®
  • Phone: 800-671-6898

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 45% Small, 35% Medium

What Are Recent G2 Reviews of ConnectWise SIEM?

Logsign Unified SO Platform

Logsign Unified SO Platform integrates next-gen SIEM, threat intelligence, UEBA, and SOAR and empowers organizations to optimize and streamline their cybersecurity operations. In addition to that, the platform offers seamless integration capabilities, allowing them to effortlessly integrate their existing security software and leverage our vast integration library, expanding the Logsign USO Platform's functionality and providing a comprehensive security management experience. With these extensive capabilities, it allows organizations to improve their security posture and ensure compliance with relevant regulations and standards. - Easy-to-deploy, easy-to-use Unified SO Platform for all sizes of enterprises. - Enterprise-grade scalability, high availability - Cluster SIEM, big data infrastructure.  - On-premise solution. - 500+ predefined integrations and free plugin service. - Collects & stores high volumes of data. - Threat hunting, fast search & investigation, advanced behaviour analysis, IOC detection. - Threat Intelligence and UEBA embedded. - Real-time detection & prevention, wide correlation library based on Mitre Att&ck framework.  - Real-time monitoring, predefined dashboards & reports, meeting Compliance Requirements (PCI DSS, ISO 27001, HIPAA, SOX, and more). - Automated notifications, automated Incident response - Incident Cycle Management - Incident Response - Multiple pricing options without capacity or log source limit, feature-based pricing.

Average Rating: 4.7/5.0

Total Reviews: 53

How Do G2 Users Rate Logsign Unified SO Platform?

  • Activity Monitoring: 9.1/10 (Category avg: 9.2/10)
  • Data Examination: 8.7/10 (Category avg: 8.7/10)
  • Ease of Use: 9.6/10 (Category avg: 8.8/10)
  • Log Management: 9.6/10 (Category avg: 9.2/10)

Who Is the Company Behind Logsign Unified SO Platform?

  • Seller: Logsign
  • Year Founded: 2010
  • HQ Location: Hague, Netherlands, NL
  • LinkedIn® Page: www.linkedin.com
    41 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 50% Medium, 31% Small

What Are Recent G2 Reviews of Logsign Unified SO Platform?

What Are G2 Users Discussing About Logsign Unified SO Platform?

SolarWinds Security Event Manager

Security Event Manager (SEM) is a powerful, real-time Security Information and Event Management (SIEM) solution designed to act as a virtual Security Operations Center (SOC). It provides active monitoring and automated threat detection across multi-vendor network devices, servers, workstations, and applications. SEM is delivered as a downloadable virtual appliance for rapid deployment, and allows IT teams to centralize log data and enable real-time event correlation right out of the box. SEM goes beyond simple alerting by offering automated remediation actions. When suspicious behavior is detected, the platform can automatically block malicious IPs, disable compromised user accounts, kill unauthorized applications, or detach unmanaged USB devices via its integrated USB Defender. This immediate response capability significantly reduces the window of vulnerability during a cyber-attack. To ensure deep visibility, SEM features built-in File Integrity Monitoring (FIM), allowing you to track sensitive file changes, deletions, and registry modifications. The platform also streamlines audit preparation with hundreds of pre-built, out-of-the-box compliance reports for major regulatory frameworks, including HIPAA, PCI DSS, SOX, ISO, DISA STIGs, and FISMA. With its intuitive text-based searching and integrated threat intelligence feed, SEM normalizes disparate log data into a readable format. This enables faster forensic analysis and historical searching, helping your team identify patterns from known bad actors and strengthen your overall security posture. Whether you are managing internal threats or external breaches, SolarWinds SEM provides the essential tools to detect, respond, and report with confidence. For organizations seeking tailored security control, SEM is highly effective as a standalone SIEM tool, providing dedicated log management and incident response. However, for those looking to eliminate silos between security and IT operations, SEM can also function as a core component of SolarWinds Observability.

Average Rating: 4.0/5.0

Total Reviews: 71

How Do G2 Users Rate SolarWinds Security Event Manager?

  • Activity Monitoring: 9.2/10 (Category avg: 9.2/10)
  • Data Examination: 8.5/10 (Category avg: 8.7/10)
  • Ease of Use: 8.2/10 (Category avg: 8.8/10)
  • Log Management: 8.9/10 (Category avg: 9.2/10)

Who Is the Company Behind SolarWinds Security Event Manager?

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 51% Large, 39% Medium

What Do G2 Reviewers Say About SolarWinds Security Event Manager?

AI-generated summary from verified user reviews

Pros
  • Users value the detection efficiency of SolarWinds Security Event Manager, finding it user-friendly for monitoring devices.
  • Users find the ease of use of SolarWinds Security Event Manager beneficial for quick device management.
Cons
  • Users find the licensing costs and complexity challenging, often struggling with insufficient support options in their region.
  • Users find customer support lacking, with limited expert assistance and unhelpful online resources.

What Are Recent G2 Reviews of SolarWinds Security Event Manager?

What Are G2 Users Discussing About SolarWinds Security Event Manager?

Guardsix

Guardsix is the sovereign security platform for lean European teams, bringing log management and audit-ready compliance to regulated industries, critical national infrastructure operators, and the Managed Security Service Providers (MSSPs) that serve them throughout Europe and beyond. Headquartered in Copenhagen, Denmark, Guardsix delivers sovereign-by-design security for organisations that carry real operational responsibility. The company employs several hundred cyber security specialists and keeps every organisation it serves in full control of their data, deployment, and operations. Guardsix provides a unified Command Centre platform combining: • Security Information and Event Management (SIEM) • Network Detection and Response (NDR) • Security Orchestration, Automation and Response (SOAR) • Fleet for enabling multi-tenant management • Governance for Healthcare internal risk compliance monitoring The platform is built to support European data sovereignty, regulatory compliance and operational control, with predictable node-based pricing and deployment options spanning on-premises, air-gapped, hybrid and cloud environments. Guardsix solutions help organisations: • Simplify audit readiness for regulations such as NIS2, DORA, and GDPR. • Support lean security teams with efficient log management and simplified workflows. • Scale security operations without increased complexity or ingestion-led pricing surprises. • Keep security data under European jurisdiction and control — where it lives, who operates it, and under whose laws. • Deploy on their own terms, on-prem and in infrastructure they control, keeping migration a real option at every renewal. • See clearly across their whole environment, with SIEM, NDR, SOAR, Fleet, and Governance in one sovereign platform rather than a stack of point tools. Guardsix maintains SOC 2 Type II attestation and designs its solutions in accordance with European data protection requirements. With a strong partner-first model, Guardsix works closely with regional MSSPs and service providers, combining sovereign-by-design security technology with European integrity and deployment flexibility.

Average Rating: 4.3/5.0

Total Reviews: 105

How Do G2 Users Rate Guardsix?

  • Activity Monitoring: 8.2/10 (Category avg: 9.2/10)
  • Data Examination: 8.0/10 (Category avg: 8.7/10)
  • Ease of Use: 8.3/10 (Category avg: 8.8/10)
  • Log Management: 8.6/10 (Category avg: 9.2/10)

Who Is the Company Behind Guardsix?

  • Seller: guardsix
  • Company Website:
  • Year Founded: 2001
  • HQ Location: Copenhagen, Capital Region
  • LinkedIn® Page: linkedin.com
    180 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 44% Medium, 31% Small

What Do G2 Reviewers Say About Guardsix?

AI-generated summary from verified user reviews

Pros
  • Users highlight the ease of use of Guardsix, simplifying administration and enhancing overall user experience.
  • Users appreciate the ease of use of Guardsix Log Management, making it simple and efficient for managing logs.
  • Users commend the excellent customer support of Logpoint, enhancing the overall experience and satisfaction with the product.
  • Users value the easy integrations of Logpoint, seamlessly unifying various telemetry types within their existing tech ecosystem.
  • Users value the efficiency of Logpoint, simplifying incident management and enhancing overall effectiveness in daily operations.
Cons
  • Users find the poor interface design challenging, making it difficult to navigate and utilize effectively.
  • Users find the UX improvement necessary as logs are poorly presented and the interface is slow and confusing.
  • Users find the interface complexity challenging, though improvements are expected in the near future.
  • Users find the confusing interface of Guardsix challenging and slow to navigate, impacting their overall experience.
  • Users feel there is an information deficiency about resource needs, leading to potential overuse and uncertainty in design.

What Are Recent G2 Reviews of Guardsix?

What Are G2 Users Discussing About Guardsix?

UTMStack

UTMStack is an open-source XDR platform that unifies threat detection, response, and compliance in one system. Built on a SIEM core that correlates events, threat intelligence, and malware patterns in real time — before data is indexed — it brings together log management, XDR, SOAR, threat intelligence, vulnerability scanning, and compliance reporting, so teams can monitor, investigate, and respond from a single console instead of stitching together separate tools. UTMStack is EDR-agnostic. It ingests telemetry from the endpoint, network, cloud, and identity tools you already use — including CrowdStrike, SentinelOne, Sophos, Palo Alto, Fortinet, AWS, Azure, and Microsoft 365 — and correlates everything centrally, with no rip-and-replace. The SOC-AI module supports both built-in and custom machine-learning models for AI-assisted analysis, and pre-built reporting helps teams meet frameworks such as CMMC, NIS2, SOC 2, HIPAA, ISO 27001, and PCI-DSS. Licensed under AGPL-3.0 and member of the Linux Foundation UTMStack is free to self-host, with paid plans for enterprise support, advanced AI, and compliance — plus multi-tenant and OEM licensing for MSPs and MSSPs.

Average Rating: 4.5/5.0

Total Reviews: 10

How Do G2 Users Rate UTMStack?

  • Activity Monitoring: 9.4/10 (Category avg: 9.2/10)
  • Data Examination: 8.8/10 (Category avg: 8.7/10)
  • Ease of Use: 8.7/10 (Category avg: 8.8/10)
  • Log Management: 8.8/10 (Category avg: 9.2/10)

Who Is the Company Behind UTMStack?

Who Uses This Product?

  • Company Size: 70% Small, 40% Medium

What Are Recent G2 Reviews of UTMStack?

What Are G2 Users Discussing About UTMStack?

OpenText ArcSight Enterprise Security Manager (ESM)

ArcSight Enterprise Security Manager (ESM) is a comprehensive threat detection, analysis, triage, and compliance management SIEM platform that dramatically reduces the time to mitigate cyber-security threats.

Average Rating: 3.7/5.0

Total Reviews: 14

How Do G2 Users Rate OpenText ArcSight Enterprise Security Manager (ESM)?

  • Activity Monitoring: 9.0/10 (Category avg: 9.2/10)
  • Data Examination: 8.8/10 (Category avg: 8.7/10)
  • Ease of Use: 7.9/10 (Category avg: 8.8/10)
  • Log Management: 8.5/10 (Category avg: 9.2/10)

Who Is the Company Behind OpenText ArcSight Enterprise Security Manager (ESM)?

  • Seller: OpenText
  • Year Founded: 1991
  • HQ Location: Waterloo, ON
  • LinkedIn® Page: www.linkedin.com
    22,835 employees on LinkedIn®
  • Ownership: NASDAQ:OTEX
  • Phone: +1-519-888-7111

Who Uses This Product?

  • Top Industries: Computer & Network Security
  • Company Size: 53% Medium, 29% Large

What Are Recent G2 Reviews of OpenText ArcSight Enterprise Security Manager (ESM)?

What Are G2 Users Discussing About OpenText ArcSight Enterprise Security Manager (ESM)?

Logz.io

Logz.io is an AI-powered observability platform designed to help teams solve critical log management, monitoring, and troubleshooting challenges. Built for modern environments, Logz.io unifies log management, infrastructure monitoring, and distributed tracing in a single platform to provide deep, actionable insights into system performance and health. At its core, Logz.io’s AI Agent technology automates root cause analysis (RCA) and surfaces insights that accelerate investigations, reduce MTTR, and eliminate the need for time-consuming manual analysis or navigating multiple dashboards. Whether managing microservices or troubleshooting production issues, Logz.io empowers teams to quickly pinpoint issues, de-risk deployments, and focus on innovation. Unlike traditional observability tools that require ever-increasing data volumes and expertise, Logz.io offers a smarter, cost-optimized solution. With the ability to customize data ingestion and optimize telemetry costs, Logz.io ensures you get the insights you need without breaking the budget.

Average Rating: 4.5/5.0

Total Reviews: 163

How Do G2 Users Rate Logz.io?

  • Activity Monitoring: 9.0/10 (Category avg: 9.2/10)
  • Data Examination: 8.5/10 (Category avg: 8.7/10)
  • Ease of Use: 8.8/10 (Category avg: 8.8/10)
  • Log Management: 8.8/10 (Category avg: 9.2/10)

Who Is the Company Behind Logz.io?

  • Seller: Logz.io
  • Year Founded: 2014
  • HQ Location: Boston, MA
  • LinkedIn® Page: www.linkedin.com
    102 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer, Software Developer
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 53% Medium, 30% Small

What Do G2 Reviewers Say About Logz.io?

AI-generated summary from verified user reviews

Pros
  • Users value the centralized log management of Logz.io, enabling efficient issue tracking and automated reporting.
  • Users appreciate the user-friendly interface of Logz.io, facilitating easy integration and insightful log analysis.
  • Users value the centralized log collection of Logz.io, enhancing productivity with user-friendly tools and insights.
  • Users love the user-friendly interface of Logz.io, which makes navigating and analyzing logs straightforward and easy.
  • Users appreciate the search efficiency of Logz.io, enjoying seamless log collection and insightful visualizations for enhanced analysis.
Cons
  • Users find the complex configuration challenging, particularly with alerts and custom parsing rules setup.
  • Users struggle with complexity in setting up alerts and reports, often needing to delve into data for clarity.
  • Users face complex setup challenges, finding it difficult to configure alerts and navigate advanced data configurations.
  • Users find the dashboard issues in Logz.io cumbersome, with needs for improved chart creation and UI updates.
  • Users find difficult customization challenging, with complex alerts and reports hindering user experience and efficiency.

What Are Recent G2 Reviews of Logz.io?

What Are G2 Users Discussing About Logz.io?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 31, 2024