Best Security Information and Event Management (SIEM) Software Solutions - Page 3

How Many Security Information and Event Management (SIEM) Software Products Does G2 Track?

Total Products under this Category: 153

Category Stats (Nov 2026)

  • Average Rating: 4.47/5 (↑0.01 vs Oct 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Singularity AI SIEM (+2.27%) - Among all products in this category, Singularity AI SIEM recorded the largest rating increase compared to last month

Last updated: November 02, 2026

How Does G2 Rank Security Information and Event Management (SIEM) Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 6,600+ Authentic Reviews
  • 153+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Security Information and Event Management (SIEM) Software

G2 Grid® for Security Information and Event Management (SIEM) Software plotting products by satisfaction and market presence

Highlighted products: Google Security Operations, CrowdStrike Falcon Endpoint Protection Platform, Palo Alto Cortex XSIAM, Sumo Logic, Huntress Managed SIEM, Todyl Security Platform, ManageEngine ADAudit Plus, and Elastic Security.

Underlying data: [Grid® JSON](https://www.g2.com/categories/security-information-and-event-management-siem/grids.json?focus%5B%5D=google-security-operations&focus%5B%5D=crowdstrike-falcon-endpoint-protection-platform&focus%5B%5D=palo-alto-cortex-xsiam&focus%5B%5D=sumo-logic&focus%5B%5D=huntress-managed-siem&focus%5B%5D=todyl-security-platform&focus%5B%5D=manageengine-adaudit-plus&focus%5B%5D=elastic-elastic-security)

Check Point SmartEvent Event Management

SmartEvent event management provides full threat visibility with a single view into security risks. Take control and command the security event through real-time forensic and event investigation, compliance, and reporting. Respond to security incidents immediately and gain network true insights. Features include: integrated threat management, single view into security risks, customizable views and reports, full threat visibility, and real-time forensic and event investigation.

Average Rating: 4.4/5.0

Total Reviews: 13

How Do G2 Users Rate Check Point SmartEvent Event Management?

  • Activity Monitoring: 8.3/10 (Category avg: 9.2/10)
  • Data Examination: 8.0/10 (Category avg: 8.7/10)
  • Ease of Use: 9.0/10 (Category avg: 8.8/10)
  • Log Management: 8.3/10 (Category avg: 9.2/10)

Who Is the Company Behind Check Point SmartEvent Event Management?

Who Uses This Product?

  • Company Size: 69% Large, 23% Medium

What Do G2 Reviewers Say About Check Point SmartEvent Event Management?

AI-generated summary from verified user reviews

Pros
  • Users value the full threat visibility of Check Point SmartEvent, enabling quick and informed responses to security risks.
  • Users appreciate the full threat visibility provided by SmartEvent, enabling quick responses to security risks easily.
  • Users value the effective alerting system of SmartEvent, providing clarity and context for quick responses.
  • Users appreciate the ease of use of Check Point SmartEvent, enabling quick and focused responses to network events.
  • Users value effective monitoring in SmartEvent, allowing quick response to relevant events without unnecessary clutter.
Cons
  • Users find the initial setup to have a steep learning curve, making the experience feel overwhelming at times.
  • Users face deployment difficulties with random CPSEMD process terminations, causing login failures and high CPU usage in SmartEvent.
  • Users experience difficult learning due to random CPSEMD terminations causing login failures and high CPU usage in SmartEvent GUI.
  • Users find the initial learning curve steep, making it challenging to filter data effectively and receive relevant alerts.
  • Users experience setup difficulties with Check Point SmartEvent, including random process terminations and high CPU usage issues.

What Are Recent G2 Reviews of Check Point SmartEvent Event Management?

What Are G2 Users Discussing About Check Point SmartEvent Event Management?

Cisco Security Manager

Advanced Security Manager is a computer security software that secures information from unwanted intruders in a computer.

Average Rating: 4.3/5.0

Total Reviews: 21

How Do G2 Users Rate Cisco Security Manager?

  • Activity Monitoring: 8.5/10 (Category avg: 9.2/10)
  • Data Examination: 8.0/10 (Category avg: 8.7/10)
  • Ease of Use: 8.8/10 (Category avg: 8.8/10)
  • Log Management: 8.6/10 (Category avg: 9.2/10)

Who Is the Company Behind Cisco Security Manager?

  • Seller: Cisco
  • Year Founded: 1984
  • HQ Location: San Jose, CA
  • LinkedIn® Page: www.linkedin.com
    95,294 employees on LinkedIn®
  • Ownership: NASDAQ:CSCO
  • Phone: 847-678-6600

Who Uses This Product?

  • Company Size: 52% Large, 43% Medium

What Are Recent G2 Reviews of Cisco Security Manager?

NetWitness Platform

NetWitness is a comprehensive threat detection, investigation and response platform that combines visibility, analytics, insight, and automation into a single solution. It collects and analyzes data across all capture points (logs, packets, netflow, endpoint and IoT) and computing platforms (physical, virtual and cloud), enriching data with threat intelligence and business context.

Average Rating: 3.9/5.0

Total Reviews: 23

How Do G2 Users Rate NetWitness Platform?

  • Activity Monitoring: 8.3/10 (Category avg: 9.2/10)
  • Data Examination: 8.3/10 (Category avg: 8.7/10)
  • Ease of Use: 7.7/10 (Category avg: 8.8/10)
  • Log Management: 8.6/10 (Category avg: 9.2/10)

Who Is the Company Behind NetWitness Platform?

Who Uses This Product?

  • Company Size: 54% Large, 33% Medium

What Do G2 Reviewers Say About NetWitness Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the network packet capture feature of NetWitness for effective forensic investigations and threat hunting.
  • Users appreciate the centralized threat detection capabilities of NetWitness Platform, enhancing efficiency in threat hunting across various data sources.
  • Users value the centralized view provided by NetWitness Platform, simplifying threat hunting across various data sources.
  • Users value the centralized threat hunting capabilities of NetWitness Platform, streamlining their cybersecurity efforts effectively.
  • Users value the full network packet capture capability of NetWitness, enhancing deep forensic investigation significantly.
Cons
  • Users find the complex implementation of NetWitness Platform challenging, needing extensive technical expertise for setup and upgrades.
  • Users find the complexity of initial deployment and upgrades challenging, requiring significant technical expertise and causing instability.
  • Users find the initial setup complex, often needing advanced expertise, which can hinder deployment and upgrades.
  • Users face complex deployment difficulties with the NetWitness Platform, needing substantial expertise for initial setup and upgrades.
  • Users face complex initial setup and deployment challenges, often needing significant expertise for effective use.

What Are Recent G2 Reviews of NetWitness Platform?

What Are G2 Users Discussing About NetWitness Platform?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

Pandora FMS

Pandora FMS is a unified monitoring and observability platform designed to consolidate visibility, alerting, reporting, and automation across heterogeneous IT environments. Instead of combining multiple point tools for networks, servers, applications, and cloud services, Pandora FMS centralizes data collection and operational workflows in a single console, reducing integration effort and operational complexity in on-premise, hybrid, and multi-cloud architectures. The platform collects telemetry using multiple methods, including agents, remote checks, standard protocols (e.g., SNMP/WMI), APIs, and log/event ingestion. This enables teams to monitor infrastructure and services end-to-end, correlate signals, and maintain consistent alerting policies and dashboards across distributed estates. Pandora FMS also supports capacity and trend analysis to anticipate resource constraints and identify recurring patterns, and includes AI-assisted capabilities for anomaly detection and automated thresholds to surface hard-to-spot operational signals. Pandora FMS is extensible through a large plugin ecosystem (500+ plugins and integrations), covering a wide range of enterprise and infrastructure technologies such as SAP, Oracle, Citrix, JBoss, VMware, AWS, SQL Server, Red Hat, and WebSphere. This extensibility helps organizations standardize monitoring across legacy and modern stacks without redesigning their monitoring approach per technology. Core capabilities: -Unified monitoring for networks, servers, applications, cloud services, endpoints, and logs -Centralized alerting, event correlation, dashboards, and scheduled reporting -Flexible data collection via agents, remote checks, APIs, and plugins -Scalability for distributed environments and large numbers of monitored elements -Analytics for trend/capacity planning plus AI-assisted anomaly detection and dynamic thresholds -A key differentiator is direct vendor support, which simplifies escalation and ensures continuity of expertise for deployment, tuning, and ongoing operations.

Average Rating: 4.6/5.0

Total Reviews: 226

How Do G2 Users Rate Pandora FMS?

  • Activity Monitoring: 10.0/10 (Category avg: 9.2/10)
  • Data Examination: 8.3/10 (Category avg: 8.7/10)
  • Ease of Use: 9.1/10 (Category avg: 8.8/10)
  • Log Management: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind Pandora FMS?

  • Seller: Pandora FMS
  • Company Website:
  • Year Founded: 2004
  • HQ Location: Madrid, Spain
  • LinkedIn® Page: www.linkedin.com
    56 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Data Analyst
  • Top Industries: Information Technology and Services, Telecommunications
  • Company Size: 50% Medium, 37% Small

What Do G2 Reviewers Say About Pandora FMS?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the flexibility of monitoring with Pandora FMS, enabling customized alerts, dashboards, and comprehensive data visibility.
  • Users value the ease of use of Pandora FMS, as it simplifies monitoring across diverse systems effortlessly.
  • Users value the real-time monitoring capabilities of Pandora FMS, ensuring immediate alerts and comprehensive oversight of systems.
  • Users value the flexibility of Pandora FMS, enabling customizable monitoring and adaptable solutions for diverse needs.
  • Users praise the network monitoring feature of Pandora FMS for its real-time alerts and centralized control.
Cons
  • Users find the learning curve steep due to a lack of template support and unclear documentation.
  • Users struggle with the complex setup of Pandora FMS, requiring time and expertise for proper configuration.
  • Users find learning difficulty in mastering all features, especially with Grafana integration and advanced monitoring setups.
  • Users find the difficult learning curve challenging, requiring additional time to master Pandora FMS's features.
  • Users find the complex configuration of Pandora FMS challenging, requiring significant time to set up effectively.

What Are Recent G2 Reviews of Pandora FMS?

What Are G2 Users Discussing About Pandora FMS?

LevelBlue USM Anywhere

LevelBlue USM Anywhere is a cloud-based security management solution that accelerates and centralizes threat detection, incident response, and compliance management for your cloud, hybrid cloud, and on-premises environments. USM Anywhere includes purpose-built cloud sensors that natively monitor your Amazon Web Services (AWS) and Microsoft Azure cloud environments. On premises, lightweight virtual sensors run on Microsoft Hyper-V and VMware ESXi to monitor your virtual private cloud and physical IT infrastructure. With USM Anywhere, you can rapidly deploy sensors into your cloud and on-premises environments while centrally managing data collection, security analysis, and threat detection from the AlienVault Secure Cloud. Five Essential Security Capabilities in a Single SaaS Platform AlienVault USM Anywhere provides five essential security capabilities in a single SaaS solution, giving you everything you need for threat detection, incident response, and compliance management—all in a single pane of glass. With USM Anywhere, you can focus on finding and responding to threats, not managing software. An elastic, cloud-based security solution, USM Anywhere can readily scale to meet your threat detection needs as your hybrid cloud environment changes and grows. 1. Asset Discovery 2. Vulnerability Assessment 3. Intrusion Detection 4. Behavioral Monitoring 5. SIEM

Average Rating: 4.4/5.0

Total Reviews: 102

How Do G2 Users Rate LevelBlue USM Anywhere?

  • Activity Monitoring: 8.9/10 (Category avg: 9.2/10)
  • Data Examination: 8.4/10 (Category avg: 8.7/10)
  • Ease of Use: 8.3/10 (Category avg: 8.8/10)
  • Log Management: 8.9/10 (Category avg: 9.2/10)

Who Is the Company Behind LevelBlue USM Anywhere?

Who Uses This Product?

  • Top Industries: Information Technology and Services, Financial Services
  • Company Size: 62% Medium, 20% Small

What Are Recent G2 Reviews of LevelBlue USM Anywhere?

What Are G2 Users Discussing About LevelBlue USM Anywhere?

Adlumin

Adlumin, an N-able Company, provides enterprise-grade cybersecurity for organizations of all sizes through its innovative Security Operations as a Service platform. With an agnostic approach, the Adlumin platform seamlessly integrates with existing tech stacks, and its flexible management options enable it to be self-managed by an internal team, or fully managed by Adlumin experts. The Adlumin platform stops cyber threats early with deep learning models tailored to each environment. It maximizes resource efficiency by optimizing existing technology and streamlining workflows across teams. Adlumin transforms risk into resilience by identifying and addressing vulnerabilities, while cybersecurity experts proactively uncover and neutralize threats before they can do damage. Adlumin empowers organizations to take control of their digital security making advanced protection accessible to all.

Average Rating: 4.7/5.0

Total Reviews: 65

How Do G2 Users Rate Adlumin?

  • Activity Monitoring: 9.7/10 (Category avg: 9.2/10)
  • Data Examination: 9.2/10 (Category avg: 8.7/10)
  • Ease of Use: 9.0/10 (Category avg: 8.8/10)
  • Log Management: 9.5/10 (Category avg: 9.2/10)

Who Is the Company Behind Adlumin?

  • Seller: N-able
  • Company Website:
  • HQ Location: Morrisville, North Carolina
  • LinkedIn® Page: www.linkedin.com
    2,307 employees on LinkedIn®
  • Ownership: NYSE: NABL

Who Uses This Product?

  • Top Industries: Financial Services, Information Technology and Services
  • Company Size: 56% Medium, 23% Small

What Do G2 Reviewers Say About Adlumin?

AI-generated summary from verified user reviews

Pros
  • Users value the detailed analytic reports from Adlumin, praising its reliability and ease of use.
  • Users value the detailed analytic reports from Adlumin, praising its reliability and user-friendly interface.
  • Users find Adlumin reliable and easy to use, particularly valuing the detailed analytic reports it provides.
  • Users appreciate the ease of management in Adlumin, finding it reliable and user-friendly for detailed reports.
  • Users find Adlumin's interface to be easy to use, with detailed analytics enhancing their experience.
Cons
  • Users feel that Adlumin's customer support could be better, indicating some room for improvement in service quality.

What Are Recent G2 Reviews of Adlumin?

Exabeam New-Scale Platform

The Exabeam New-Scale Security Operations Platform is built to help organizations detect, investigate, and respond to insider threats tied to both human users and non-human identities. It brings together behavioral analytics, automation, and AI-driven workflows to help security operations teams reduce risk and maintain operational integrity. The platform supports AI agent-powered threat detection, investigation, and response (TDIR) by automating high-friction tasks and applying behavioral context to every signal. By combining proactive risk identification with fast, guided response, the New-Scale Platform helps teams move from alert handling to informed decision-making. Designed for enterprise security operations teams, the New-Scale Platform supports organizations that need consistent visibility into internal risk without adding operational overhead. Analysts use behavioral analytics to understand what is normal for a user or agent, then quickly spot meaningful deviations. This approach is especially valuable in data-sensitive industries such as finance, healthcare, and technology, where internal misuse, compromised credentials, or agent misuse can create immediate business impact. At the core of the New-Scale Platform is advanced behavioral analytics. The platform analyzes activity patterns across identities, devices, and services to establish baselines of normal behavior. When activity deviates from those baselines, dynamic risk scoring helps security teams focus on the activity most likely to indicate misuse or compromise. This reduces alert noise and shortens the time it takes to understand what is happening and why. The New-Scale Platform also extends user and entity behavior analytics (UEBA) to non-human identities through Agent Behavior Analytics (ABA). ABA applies the same behavior-based approach as UEBA to service accounts, APIs, automation tools, and AI agents. By monitoring how agents typically interact with data and systems, the platform helps teams detect misuse, drift, or compromise that traditional controls often miss. Automation plays a central role in improving day-to-day operations. The New-Scale Platform automates investigation steps, enrichment, and response actions within TDIR workflows, allowing analysts to spend less time on repetitive tasks and more time validating risk and containing incidents. Behavioral context and AI-driven prioritization help teams address the most relevant threats first, improving response consistency without increasing workload. With the Exabeam New-Scale Platform, security teams can benchmark and prove the value of their security program against peers and measurable outcomes. Outcomes Navigator translates raw security data into business-relevant insights to demonstrate progress against the most strategic use cases, MITRE ATT&CK TTPs, and compliance initiatives. Together, user and entity behavior analytics (UEBA), Agent Behavior Analytics (ABA), and agent-powered automated TDIR workflows help security operations teams detect insider risk earlier, investigate faster, and respond with greater precision. The New-Scale Platform gives organizations a practical way to manage insider threats tied to people and agents, accelerate security operations, and prove security impact over time.

Average Rating: 4.6/5.0

Total Reviews: 15

How Do G2 Users Rate Exabeam New-Scale Platform?

  • Activity Monitoring: 9.0/10 (Category avg: 9.2/10)
  • Data Examination: 9.2/10 (Category avg: 8.7/10)
  • Ease of Use: 9.1/10 (Category avg: 8.8/10)
  • Log Management: 9.2/10 (Category avg: 9.2/10)

Who Is the Company Behind Exabeam New-Scale Platform?

  • Seller: Exabeam
  • Company Website:
  • Year Founded: 2013
  • HQ Location: Broomfield, CO
  • LinkedIn® Page: www.linkedin.com
    785 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 56% Large, 31% Medium

What Do G2 Reviewers Say About Exabeam New-Scale Platform?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Exabeam New-Scale Platform, enjoying its seamless integration and functionality.
  • Users value the detection accuracy of Exabeam New-Scale Platform, enhancing threat identification and response effectiveness.
  • Users appreciate the ease of integration and robust security features of Exabeam New-Scale Platform for effective monitoring.
  • Users appreciate the world-class security features of Exabeam, valuing its comprehensive monitoring and ease of integration.
  • Users value the fully automated capabilities of Exabeam New-Scale Platform, enhancing efficiency in threat response and management.
Cons
  • Users find the platform's complexity challenging, requiring significant expertise for setup and configuration.
  • Users find the complex setup of Exabeam New-Scale Platform challenging, often requiring significant expertise to manage effectively.
  • Users find the difficult setup of Exabeam New-Scale Platform challenging, requiring significant expertise and manual configuration.
  • Users find parsing issues hinder effective use of Exabeam, requiring manual intervention and impacting overall user experience.
  • Users find the software complexity challenging, requiring expertise for setup and managing configurations effectively.

What Are Recent G2 Reviews of Exabeam New-Scale Platform?

What Are G2 Users Discussing About Exabeam New-Scale Platform?

Graylog

SIEM and log management in one platform Graylog helps security and IT teams detect, investigate, and respond to threats faster, using explainable AI and real-time data correlation to turn large volumes of log data into decisions they can act on. More than 60,000 organizations worldwide use Graylog for visibility and control over their IT environments. The problem Security analysts and IT professionals spend their days sifting through vast amounts of log data to find the anomalies that matter, track incidents, and prove compliance with regulatory standards. Most of that data is noise. -Too many alerts that do not matter, and the one that does is buried. -Forensic evidence scattered across tools, so investigations stall. -Audit documentation assembled by hand the week before the deadline. Catch the patterns rules miss Anomaly detection flags unusual patterns in your data so your team sees behavior that signature-based rules leave in the blind spot. Real-time correlation connects related events as they arrive. Investigations that build themselves Guided investigations walk analysts through complex incidents. Automated workflows handle the repetitive tasks, and AI-driven summaries surface the affected assets, the incident timeline, and the high-priority findings. Analysts focus on what matters instead of excessive data. Work the alerts that matter first Risk scores rank each alert by the severity of what fired and the importance of the assets involved, so a port scan against a database of client PII outranks the same scan against a user laptop. With centralized log management, every log stays a single log, giving your team the historic evidence to complete forensic investigations in one place. One platform, three products Graylog fits the team you have: -Graylog Open for log management on an open foundation. -Graylog Enterprise for IT operations and log management at scale. -Graylog Security for detection, investigation, and response.

Average Rating: 4.4/5.0

Total Reviews: 115

How Do G2 Users Rate Graylog?

  • Activity Monitoring: 8.7/10 (Category avg: 9.2/10)
  • Data Examination: 8.3/10 (Category avg: 8.7/10)
  • Ease of Use: 8.4/10 (Category avg: 8.8/10)
  • Log Management: 9.1/10 (Category avg: 9.2/10)

Who Is the Company Behind Graylog?

  • Seller: Graylog
  • Company Website:
  • Year Founded: 2009
  • HQ Location: Houston, US
  • LinkedIn® Page: www.linkedin.com
    124 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 42% Medium, 34% Small

What Do G2 Reviewers Say About Graylog?

AI-generated summary from verified user reviews

Pros
  • Users find Graylog to be reliable and cost-effective, successfully meeting industry standards for their needs.
  • Users value the detailed insights Graylog provides, significantly enhancing their debugging efficiency for complex issues.
  • Users find the extensive detail for APIs invaluable for effective debugging in complex scenarios.
  • Users find the extensive API detail invaluable for effective debugging, preventing dead ends in complex processes.
  • Users appreciate the reliable and cost-effective pricing of Graylog, which meets industry standards effectively.
Cons
  • Users experience complexity in Graylog, often wasting time on debugging instead of saving it during API response reviews.
  • Users face debugging difficulties with Graylog, leading to time wasted instead of efficient troubleshooting.
  • Users note that integration issues with multiple platforms can hinder the effectiveness and usability of Graylog.
  • Users find the learning curve steep with Graylog, often leading to time-consuming debugging and review processes.
  • Users find that the time consumption when using Graylog can hinder productivity, especially during debugging and API review.

What Are Recent G2 Reviews of Graylog?

What Are G2 Users Discussing About Graylog?

ConnectWise SIEM

Designed for MPS, ConnectWise SIEM is a cutting-edge platform that harnesses the power of advanced security information and event management (SIEM) to provide unparalleled visibility and protection for businesses. With its robust multi-tenancy capabilities, ConnectWise SIEM allows IT Service Providers to efficiently manage security operations across multiple clients or departments from a single interface. By seamlessly integrating with the ConnectWise Security Operations Center (SOC), this platform enables users to leverage expert insights and resources to proactively detect and respond to security threats, ensuring comprehensive protection and peace of mind for businesses of all sizes. The core features of ConnectWise SIEM include: 1. Real-time Threat Detection: ConnectWise SIEM continuously monitors network activity to detect and alert on potential security threats in real-time. 2. Log Management: The platform collects, normalizes, and analyzes log data from various sources to provide a comprehensive view of the organization's security posture. 3. Incident Response: ConnectWise SIEM facilitates rapid incident response by providing automated workflows and playbooks for handling security incidents effectively. 4. Compliance Reporting: The platform helps organizations meet regulatory compliance requirements by generating reports and audits to demonstrate adherence to security standards. 5. Threat Intelligence Integration: ConnectWise SIEM integrates with threat intelligence feeds to enhance threat detection capabilities and stay ahead of emerging cyber threats. 6. Multi-Tenancy Support: The platform offers multi-tenancy support, allowing Managed Service Providers (MSPs) to manage security operations for multiple clients from a single interface. 7. ConnectWise SOC Integration: ConnectWise SIEM seamlessly integrates with the ConnectWise Security Operations Center (SOC) to leverage expert insights and resources for enhanced security monitoring and response.

Average Rating: 4.3/5.0

Total Reviews: 20

How Do G2 Users Rate ConnectWise SIEM?

  • Activity Monitoring: 8.9/10 (Category avg: 9.2/10)
  • Data Examination: 8.3/10 (Category avg: 8.7/10)
  • Ease of Use: 8.2/10 (Category avg: 8.8/10)
  • Log Management: 8.8/10 (Category avg: 9.2/10)

Who Is the Company Behind ConnectWise SIEM?

  • Seller: ConnectWise
  • Company Website:
  • Year Founded: 1982
  • HQ Location: Tampa, FL
  • LinkedIn® Page: www.linkedin.com
    3,401 employees on LinkedIn®
  • Phone: 800-671-6898

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 45% Small, 35% Medium

What Are Recent G2 Reviews of ConnectWise SIEM?

Logsign Unified SO Platform

Logsign Unified SO Platform integrates next-gen SIEM, threat intelligence, UEBA, and SOAR and empowers organizations to optimize and streamline their cybersecurity operations. In addition to that, the platform offers seamless integration capabilities, allowing them to effortlessly integrate their existing security software and leverage our vast integration library, expanding the Logsign USO Platform's functionality and providing a comprehensive security management experience. With these extensive capabilities, it allows organizations to improve their security posture and ensure compliance with relevant regulations and standards. - Easy-to-deploy, easy-to-use Unified SO Platform for all sizes of enterprises. - Enterprise-grade scalability, high availability - Cluster SIEM, big data infrastructure.  - On-premise solution. - 500+ predefined integrations and free plugin service. - Collects & stores high volumes of data. - Threat hunting, fast search & investigation, advanced behaviour analysis, IOC detection. - Threat Intelligence and UEBA embedded. - Real-time detection & prevention, wide correlation library based on Mitre Att&ck framework.  - Real-time monitoring, predefined dashboards & reports, meeting Compliance Requirements (PCI DSS, ISO 27001, HIPAA, SOX, and more). - Automated notifications, automated Incident response - Incident Cycle Management - Incident Response - Multiple pricing options without capacity or log source limit, feature-based pricing.

Average Rating: 4.7/5.0

Total Reviews: 53

How Do G2 Users Rate Logsign Unified SO Platform?

  • Activity Monitoring: 9.1/10 (Category avg: 9.2/10)
  • Data Examination: 8.7/10 (Category avg: 8.7/10)
  • Ease of Use: 9.6/10 (Category avg: 8.8/10)
  • Log Management: 9.6/10 (Category avg: 9.2/10)

Who Is the Company Behind Logsign Unified SO Platform?

  • Seller: Logsign
  • Year Founded: 2010
  • HQ Location: Hague, Netherlands, NL
  • LinkedIn® Page: www.linkedin.com
    41 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 50% Medium, 31% Small

What Are Recent G2 Reviews of Logsign Unified SO Platform?

What Are G2 Users Discussing About Logsign Unified SO Platform?

SolarWinds Security Event Manager

Security Event Manager (SEM) is a powerful, real-time Security Information and Event Management (SIEM) solution designed to act as a virtual Security Operations Center (SOC). It provides active monitoring and automated threat detection across multi-vendor network devices, servers, workstations, and applications. SEM is delivered as a downloadable virtual appliance for rapid deployment, and allows IT teams to centralize log data and enable real-time event correlation right out of the box. SEM goes beyond simple alerting by offering automated remediation actions. When suspicious behavior is detected, the platform can automatically block malicious IPs, disable compromised user accounts, kill unauthorized applications, or detach unmanaged USB devices via its integrated USB Defender. This immediate response capability significantly reduces the window of vulnerability during a cyber-attack. To ensure deep visibility, SEM features built-in File Integrity Monitoring (FIM), allowing you to track sensitive file changes, deletions, and registry modifications. The platform also streamlines audit preparation with hundreds of pre-built, out-of-the-box compliance reports for major regulatory frameworks, including HIPAA, PCI DSS, SOX, ISO, DISA STIGs, and FISMA. With its intuitive text-based searching and integrated threat intelligence feed, SEM normalizes disparate log data into a readable format. This enables faster forensic analysis and historical searching, helping your team identify patterns from known bad actors and strengthen your overall security posture. Whether you are managing internal threats or external breaches, SolarWinds SEM provides the essential tools to detect, respond, and report with confidence. For organizations seeking tailored security control, SEM is highly effective as a standalone SIEM tool, providing dedicated log management and incident response. However, for those looking to eliminate silos between security and IT operations, SEM can also function as a core component of SolarWinds Observability.

Average Rating: 4.0/5.0

Total Reviews: 71

How Do G2 Users Rate SolarWinds Security Event Manager?

  • Activity Monitoring: 9.2/10 (Category avg: 9.2/10)
  • Data Examination: 8.5/10 (Category avg: 8.7/10)
  • Ease of Use: 8.2/10 (Category avg: 8.8/10)
  • Log Management: 8.9/10 (Category avg: 9.2/10)

Who Is the Company Behind SolarWinds Security Event Manager?

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 51% Large, 39% Medium

What Do G2 Reviewers Say About SolarWinds Security Event Manager?

AI-generated summary from verified user reviews

Pros
  • Users praise the detection efficiency of SolarWinds Security Event Manager due to its ease of use and simple device integration.
  • Users value the ease of use of SolarWinds Security Event Manager, especially for admin tasks like adding devices.
Cons
  • Users find the licensing costs complex and note limited expert support in their region, impacting usability.
  • Users find that customer support is inadequate, particularly in terms of expert assistance and online resources.

What Are Recent G2 Reviews of SolarWinds Security Event Manager?

What Are G2 Users Discussing About SolarWinds Security Event Manager?

Guardsix

Guardsix is the sovereign security platform for lean European teams, bringing log management and audit-ready compliance to regulated industries, critical national infrastructure operators, and the Managed Security Service Providers (MSSPs) that serve them throughout Europe and beyond. Headquartered in Copenhagen, Denmark, Guardsix delivers sovereign-by-design security for organisations that carry real operational responsibility. The company employs several hundred cyber security specialists and keeps every organisation it serves in full control of their data, deployment, and operations. Guardsix provides a unified Command Centre platform combining: • Security Information and Event Management (SIEM) • Network Detection and Response (NDR) • Security Orchestration, Automation and Response (SOAR) • Fleet for enabling multi-tenant management • Governance for Healthcare internal risk compliance monitoring The platform is built to support European data sovereignty, regulatory compliance and operational control, with predictable node-based pricing and deployment options spanning on-premises, air-gapped, hybrid and cloud environments. Guardsix solutions help organisations: • Simplify audit readiness for regulations such as NIS2, DORA, and GDPR. • Support lean security teams with efficient log management and simplified workflows. • Scale security operations without increased complexity or ingestion-led pricing surprises. • Keep security data under European jurisdiction and control — where it lives, who operates it, and under whose laws. • Deploy on their own terms, on-prem and in infrastructure they control, keeping migration a real option at every renewal. • See clearly across their whole environment, with SIEM, NDR, SOAR, Fleet, and Governance in one sovereign platform rather than a stack of point tools. Guardsix maintains SOC 2 Type II attestation and designs its solutions in accordance with European data protection requirements. With a strong partner-first model, Guardsix works closely with regional MSSPs and service providers, combining sovereign-by-design security technology with European integrity and deployment flexibility.

Average Rating: 4.3/5.0

Total Reviews: 105

How Do G2 Users Rate Guardsix?

  • Activity Monitoring: 8.2/10 (Category avg: 9.2/10)
  • Data Examination: 8.0/10 (Category avg: 8.7/10)
  • Ease of Use: 8.3/10 (Category avg: 8.8/10)
  • Log Management: 8.6/10 (Category avg: 9.2/10)

Who Is the Company Behind Guardsix?

  • Seller: guardsix
  • Company Website:
  • Year Founded: 2001
  • HQ Location: Copenhagen, Capital Region
  • LinkedIn® Page: linkedin.com
    180 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 44% Medium, 31% Small

What Do G2 Reviewers Say About Guardsix?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of Guardsix, finding it straightforward and efficient for managing incidents seamlessly.
  • Users value the comprehensive log management of Guardsix, which effectively integrates diverse data sources for seamless analysis.
  • Users commend Logpoint for its responsive and effective customer support, ensuring quick resolutions and seamless integration.
  • Users highly value the easy integrations of Guardsix, enhancing their overall cybersecurity ecosystem and efficiency.
  • Users value the efficiency of LogPoint's unified system for streamlined detection and incident management, enhancing productivity.
Cons
  • Users find poor interface design frustrating, as it hinders usability and lacks essential features compared to competitors.
  • Users find the UX improvement necessary, citing slow interface and poor log presentation as major issues.
  • Users find the interface complex, requiring time to understand, though improvements are anticipated in the future.
  • Users find the confusing interface of Guardsix challenging, affecting their overall experience and efficiency.
  • Users note a lack of technical information with Guardsix, making it difficult to properly design and size their systems.

What Are Recent G2 Reviews of Guardsix?

What Are G2 Users Discussing About Guardsix?

UTMStack

UTMStack is an open-source XDR platform that unifies threat detection, response, and compliance in one system. Built on a SIEM core that correlates events, threat intelligence, and malware patterns in real time — before data is indexed — it brings together log management, XDR, SOAR, threat intelligence, vulnerability scanning, and compliance reporting, so teams can monitor, investigate, and respond from a single console instead of stitching together separate tools. UTMStack is EDR-agnostic. It ingests telemetry from the endpoint, network, cloud, and identity tools you already use — including CrowdStrike, SentinelOne, Sophos, Palo Alto, Fortinet, AWS, Azure, and Microsoft 365 — and correlates everything centrally, with no rip-and-replace. The SOC-AI module supports both built-in and custom machine-learning models for AI-assisted analysis, and pre-built reporting helps teams meet frameworks such as CMMC, NIS2, SOC 2, HIPAA, ISO 27001, and PCI-DSS. Licensed under AGPL-3.0 and member of the Linux Foundation UTMStack is free to self-host, with paid plans for enterprise support, advanced AI, and compliance — plus multi-tenant and OEM licensing for MSPs and MSSPs.

Average Rating: 4.5/5.0

Total Reviews: 10

How Do G2 Users Rate UTMStack?

  • Activity Monitoring: 9.4/10 (Category avg: 9.2/10)
  • Data Examination: 8.8/10 (Category avg: 8.7/10)
  • Ease of Use: 8.7/10 (Category avg: 8.8/10)
  • Log Management: 8.8/10 (Category avg: 9.2/10)

Who Is the Company Behind UTMStack?

Who Uses This Product?

  • Company Size: 70% Small, 40% Medium

What Are Recent G2 Reviews of UTMStack?

What Are G2 Users Discussing About UTMStack?

OpenText ArcSight Enterprise Security Manager (ESM)

ArcSight Enterprise Security Manager (ESM) is a comprehensive threat detection, analysis, triage, and compliance management SIEM platform that dramatically reduces the time to mitigate cyber-security threats.

Average Rating: 3.7/5.0

Total Reviews: 14

How Do G2 Users Rate OpenText ArcSight Enterprise Security Manager (ESM)?

  • Activity Monitoring: 9.0/10 (Category avg: 9.2/10)
  • Data Examination: 8.8/10 (Category avg: 8.7/10)
  • Ease of Use: 7.9/10 (Category avg: 8.8/10)
  • Log Management: 8.5/10 (Category avg: 9.2/10)

Who Is the Company Behind OpenText ArcSight Enterprise Security Manager (ESM)?

  • Seller: OpenText
  • Year Founded: 1991
  • HQ Location: Waterloo, ON
  • LinkedIn® Page: www.linkedin.com
    22,835 employees on LinkedIn®
  • Ownership: NASDAQ:OTEX
  • Phone: +1-519-888-7111

Who Uses This Product?

  • Top Industries: Computer & Network Security
  • Company Size: 53% Medium, 29% Large

What Are Recent G2 Reviews of OpenText ArcSight Enterprise Security Manager (ESM)?

What Are G2 Users Discussing About OpenText ArcSight Enterprise Security Manager (ESM)?

Logz.io

Logz.io is an AI-powered observability platform designed to help teams solve critical log management, monitoring, and troubleshooting challenges. Built for modern environments, Logz.io unifies log management, infrastructure monitoring, and distributed tracing in a single platform to provide deep, actionable insights into system performance and health. At its core, Logz.io’s AI Agent technology automates root cause analysis (RCA) and surfaces insights that accelerate investigations, reduce MTTR, and eliminate the need for time-consuming manual analysis or navigating multiple dashboards. Whether managing microservices or troubleshooting production issues, Logz.io empowers teams to quickly pinpoint issues, de-risk deployments, and focus on innovation. Unlike traditional observability tools that require ever-increasing data volumes and expertise, Logz.io offers a smarter, cost-optimized solution. With the ability to customize data ingestion and optimize telemetry costs, Logz.io ensures you get the insights you need without breaking the budget.

Average Rating: 4.5/5.0

Total Reviews: 163

How Do G2 Users Rate Logz.io?

  • Activity Monitoring: 9.0/10 (Category avg: 9.2/10)
  • Data Examination: 8.5/10 (Category avg: 8.7/10)
  • Ease of Use: 8.8/10 (Category avg: 8.8/10)
  • Log Management: 8.8/10 (Category avg: 9.2/10)

Who Is the Company Behind Logz.io?

  • Seller: Logz.io
  • Year Founded: 2014
  • HQ Location: Boston, MA
  • LinkedIn® Page: www.linkedin.com
    102 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer, Software Developer
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 53% Medium, 30% Small

What Do G2 Reviewers Say About Logz.io?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the easy implementation and insightful dashboards of Logz.io, enhancing their log management experience drastically.
  • Users value the user-friendly interface of Logz.io, enjoying seamless integration and insightful dashboard features.
  • Users appreciate the user-friendly dashboard of Logz.io, gaining valuable insights and simplifying log management.
  • Users appreciate the ease of use of Logz.io, making log search and customization effortless.
  • Users appreciate the search efficiency of Logz.io, benefiting from clear logs and intuitive visualizations.
Cons
  • Users find complex configuration challenging, especially when setting up alerts and parsing rules effectively.
  • Users find complexity in setting up alerts and advanced configurations frustrating, impacting their overall experience with Logz.io.
  • Users find the complex setup process challenging, especially when configuring alerts and custom parsing rules.
  • Users express the need for dashboard issues like a refined quota mechanism and easier chart creation.
  • Users find difficult customization when setting up alerts and reports, complicating their experience with Logz.io.

What Are Recent G2 Reviews of Logz.io?

What Are G2 Users Discussing About Logz.io?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 31, 2024