Best Security Information and Event Management (SIEM) Software Solutions - Page 4

How Many Security Information and Event Management (SIEM) Software Products Does G2 Track?

Total Products under this Category: 153

Category Stats (Nov 2026)

  • Average Rating: 4.47/5 (↑0.01 vs Oct 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Singularity AI SIEM (+2.27%) - Among all products in this category, Singularity AI SIEM recorded the largest rating increase compared to last month

Last updated: November 02, 2026

How Does G2 Rank Security Information and Event Management (SIEM) Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 6,600+ Authentic Reviews
  • 153+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Security Information and Event Management (SIEM) Software

G2 Grid® for Security Information and Event Management (SIEM) Software plotting products by satisfaction and market presence

Highlighted products: Google Security Operations, CrowdStrike Falcon Endpoint Protection Platform, Palo Alto Cortex XSIAM, Sumo Logic, Huntress Managed SIEM, Todyl Security Platform, ManageEngine ADAudit Plus, and Elastic Security.

Underlying data: [Grid® JSON](https://www.g2.com/categories/security-information-and-event-management-siem/grids.json?focus%5B%5D=google-security-operations&focus%5B%5D=crowdstrike-falcon-endpoint-protection-platform&focus%5B%5D=palo-alto-cortex-xsiam&focus%5B%5D=sumo-logic&focus%5B%5D=huntress-managed-siem&focus%5B%5D=todyl-security-platform&focus%5B%5D=manageengine-adaudit-plus&focus%5B%5D=elastic-elastic-security)

InsightOps

Ridiculously easy log management is just the beginning

Average Rating: 3.1/5.0

Total Reviews: 11

How Do G2 Users Rate InsightOps?

  • Activity Monitoring: 10.0/10 (Category avg: 9.2/10)
  • Data Examination: 10.0/10 (Category avg: 8.7/10)
  • Ease of Use: 6.5/10 (Category avg: 8.8/10)
  • Log Management: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind InsightOps?

  • Seller: Rapid7
  • Year Founded: 2000
  • HQ Location: Boston, MA
  • LinkedIn® Page: www.linkedin.com
    8,746 employees on LinkedIn®
  • Ownership: NASDAQ:RPD
  • Total Revenue (USD mm): $411

Who Uses This Product?

  • Top Industries: Computer Software
  • Company Size: 73% Small, 27% Medium

What Are Recent G2 Reviews of InsightOps?

Trellix Enterprise Security Manager

Trellix EnterprisTrellix Enterprise Security Manager (ESM) is a highly scalable Security Information and Event Management (SIEM) solution delivering real-time visibility across systems, networks, databases, and applications. Engineered for speed, ESM collects and correlates data from over 460 integrated technologies to provide actionable threat intelligence. It stores billions of events, offering immediate ad-hoc query capabilities, rapid forensics, and historical rule validation without impacting performance. ESM empowers security operations center (SOC) teams to automate and coordinate incident response through advanced bi-directional integrations. To streamline operations, the platform includes hundreds of customizable dashboards, reports, and correlation rules. Robust compliance features help organizations seamlessly address regulatory frameworks. With flexible hybrid deployment options (on-premises, virtual, or cloud), Trellix ESM accelerates threat detection, prioritizes alerts, and unifies security operations within a single centralized platform.

Average Rating: 4.1/5.0

Total Reviews: 37

How Do G2 Users Rate Trellix Enterprise Security Manager?

  • Activity Monitoring: 7.9/10 (Category avg: 9.2/10)
  • Data Examination: 8.1/10 (Category avg: 8.7/10)
  • Ease of Use: 8.1/10 (Category avg: 8.8/10)
  • Log Management: 8.1/10 (Category avg: 9.2/10)

Who Is the Company Behind Trellix Enterprise Security Manager?

  • Seller: Trellix
  • Year Founded: 2004
  • HQ Location: Plano, TX
  • LinkedIn® Page: www.linkedin.com
    3,811 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 42% Large, 29% Medium

What Do G2 Reviewers Say About Trellix Enterprise Security Manager?

AI-generated summary from verified user reviews

Pros
  • Users value the instant access to log data provided by Trellix Enterprise Security Manager, enhancing security operations efficiency.
  • Users value the easy dashboard customization in Trellix, enhancing visibility and efficiency for monitoring purposes.
  • Users appreciate the clear and efficient dashboard usability of Trellix Enterprise Security Manager for quick visibility.
  • Users appreciate the efficient debugging capabilities of Trellix Enterprise Security Manager for quicker issue resolution.
  • Users appreciate the ease of use of Trellix Enterprise Security Manager, with efficient options for dashboards and alerts.
Cons
  • Users find difficult customization of Trellix Enterprise Security Manager time-consuming, requiring extensive technical knowledge for effective use.
  • Users find the difficult navigation of Trellix Enterprise Security Manager frustrating, hindering effective configuration and management.
  • Users find the costliness of Trellix Enterprise Security Manager challenging, especially for organizations with limited budgets.
  • Users note the faulty detection in Trellix Enterprise Security Manager leads to persistent false positives and limited accuracy.
  • Users find integration issues challenging, as it demands extensive technical expertise and can delay implementation efforts.

What Are Recent G2 Reviews of Trellix Enterprise Security Manager?

What Are G2 Users Discussing About Trellix Enterprise Security Manager?

Fluency SIEM

Fluency is an AI-centric SIEM that turns security activity into prioritized cases, evidence-backed answers, and a clearer plan for running security operations. It combines a powerful SIEM foundation with the ability to analyze, forecast, and compare across the work of analysts, security leaders, and MSSPs. Fluency’s user and entity behavior analytics (UEBA), behavioral change detection, correlation, clustering, and risk scoring bring related activity together and prioritize the issues that need attention. Large volumes of events become fewer, more meaningful cases. That foundation gives both analysts and AI agents the context to investigate effectively. The same understanding extends beyond investigations. Teams can examine coverage gaps, system health, throughput, usage, and billing. Leaders can compare environments and performance over time, forecast capacity and cost, and identify where improvements are needed. Fluency helps them answer three essential questions: What is happening? What comes next? What needs to change? Fluency also supports compliance and certification readiness by analyzing available security evidence and documented processes. It helps teams distinguish controls supported by evidence from those that are partially supported or not yet demonstrated, identify missing evidence, and prioritize remediation. This operational analysis complements compliance platforms such as Vanta and Drata. Fluency’s Model Context Protocol (MCP) server makes these capabilities accessible through AI clients such as Claude and Codex. It supplies tools, context, and operational guidance that help agents select capabilities, combine them into workflows, and interpret results within the user’s permissions and customer scope. Findings become reports and operational artifacts in Fluency Companion, where the team can review and act on the work. Fluency backs that technology with hands-on deployment and ongoing support. Its team helps customers overcome integration obstacles, establish useful workflows, and build operational capability—including managing multiple customer environments for MSSPs. Recognized for Best Support in G2’s Fall 2026 reports, Fluency pairs security intelligence with the experience and support to put it to work.

Average Rating: 4.9/5.0

Total Reviews: 16

How Do G2 Users Rate Fluency SIEM?

  • Activity Monitoring: 9.6/10 (Category avg: 9.2/10)
  • Data Examination: 9.5/10 (Category avg: 8.7/10)
  • Ease of Use: 8.0/10 (Category avg: 8.8/10)
  • Log Management: 9.5/10 (Category avg: 9.2/10)

Who Is the Company Behind Fluency SIEM?

  • Seller: Fluency Security
  • Company Website:
  • Year Founded: 2013
  • HQ Location: Greenbelt, Maryland
  • LinkedIn® Page: www.linkedin.com
    7 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security
  • Company Size: 56% Medium, 25% Small

What Are Recent G2 Reviews of Fluency SIEM?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

BMC AMI Ops

BMC AMI Ops is an AI-driven mainframe operations management solution for IBM Z environments. It helps enterprises monitor, automate, and optimize the performance and availability of mission-critical systems while reducing operational complexity and manual effort. BMC AMI Ops uses real-time monitoring, intelligent automation, and predictive analytics to detect issues early, prioritize actions, and resolve problems faster across z/OS, Db2, IMS, and supporting infrastructure. The solution enables operations teams to shift from reactive monitoring to proactive, service-focused operations. Key capabilities include: - Real-time and predictive monitoring of mainframe workloads and resources - Intelligent automation to reduce manual intervention and operator dependency - Root cause analysis and anomaly detection to accelerate problem resolution - Service-level visibility aligned to business outcomes - On-premises execution that keeps operational data on the mainframe By modernizing mainframe operations with AI and automation, BMC AMI Ops helps organizations improve system reliability, reduce downtime, and operate IBM Z environments more efficiently at scale.

Average Rating: 4.2/5.0

Total Reviews: 72

How Do G2 Users Rate BMC AMI Ops?

  • Activity Monitoring: 10.0/10 (Category avg: 9.2/10)
  • Ease of Use: 8.5/10 (Category avg: 8.8/10)
  • Log Management: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind BMC AMI Ops?

  • Seller: BMC Software
  • Company Website:
  • Year Founded: 1980
  • HQ Location: Houston, TX
  • LinkedIn® Page: www.linkedin.com
    8,646 employees on LinkedIn®
  • Phone: 713 918 8800

Who Uses This Product?

  • Top Industries: Information Technology and Services, Banking
  • Company Size: 43% Large, 34% Small

What Are Recent G2 Reviews of BMC AMI Ops?

What Are G2 Users Discussing About BMC AMI Ops?

DNIF HYPERCLOUD

DNIF HYPERCLOUD is a cloud native platform that brings the functionality of SIEM, UEBA and SOAR into a single continuous workflow to solve cybersecurity challenges at scale. DNIF HYPERCLOUD is the flagship SaaS platform from NETMONASTERY that delivers key detection functionality using big data analytics and machine learning. NETMONASTERY aims to deliver a platform that helps customers in ingesting machine data and automatically identify anomalies in these data streams using machine learning and outlier detection algorithms. The objective is to make it easy for untrained engineers and analysts to use the platform and extract benefit reliably and efficiently.

Average Rating: 4.2/5.0

Total Reviews: 10

How Do G2 Users Rate DNIF HYPERCLOUD?

  • Activity Monitoring: 8.9/10 (Category avg: 9.2/10)
  • Data Examination: 7.8/10 (Category avg: 8.7/10)
  • Ease of Use: 8.8/10 (Category avg: 8.8/10)
  • Log Management: 8.9/10 (Category avg: 9.2/10)

Who Is the Company Behind DNIF HYPERCLOUD?

  • Seller: DNIF
  • Year Founded: 2002
  • HQ Location: Mountain View, California
  • LinkedIn® Page: www.linkedin.com
    55 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 45% Medium, 36% Large

What Are Recent G2 Reviews of DNIF HYPERCLOUD?

Corelight

Corelight's Open Network Detection and Response (NDR) Platform improves network detection coverage, accelerates incident response, and reduces operational costs by consolidating NDR, intrusion detection (IDS), and PCAP functionality in a single solution and by providing security analysts with machine learning-assisted investigations and one-click-pivots from prioritized alerts to the evidence needed to investigate and remediate them. Network Detection and Response platforms monitor and analyze network traffic, delivering telemetry into existing SIEM, XDR, or SaaS-based solutions. Corelight’s platform is unique because our detections and visibility engineering are community driven—with continuous content creation from Zeek®, Suricata IDS, and other Intel communities. And our integration with CrowdStrike XDR enables cross platform (EDR+NDR) analytics. This provides you with the most complete network visibility, powerful analytics, and threat hunting capabilities, and accelerates investigation across your entire kill chain. Corelight also delivers a comprehensive suite of network security analytics that help organizations identify more than 75 adversarial TTPs across the MITRE ATT&CK® spectrum including Exfiltration, Command and Control (C2), and Lateral Movement. These detections reveal known and unknown threats via hundreds of unique insights and alerts across machine learning, behavioral analysis, and signature-based approaches. CORELIGHT PRODUCTS + SERVICES Open NDR Platform Appliance, Cloud, Software, Virtual and SaaS Sensors IDS Fleet Manager Investigator Threat Hunting Platform Smart PCAP Corelight Training CERTIFICATIONS FIPS 140-2

Average Rating: 4.6/5.0

Total Reviews: 20

How Do G2 Users Rate Corelight?

  • Activity Monitoring: 9.0/10 (Category avg: 9.2/10)
  • Data Examination: 8.9/10 (Category avg: 8.7/10)
  • Ease of Use: 8.5/10 (Category avg: 8.8/10)
  • Log Management: 8.9/10 (Category avg: 9.2/10)

Who Is the Company Behind Corelight?

  • Seller: Corelight
  • Year Founded: 2013
  • HQ Location: San Francisco, CA
  • LinkedIn® Page: www.linkedin.com
    483 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 50% Medium, 50% Large

What Do G2 Reviewers Say About Corelight?

AI-generated summary from verified user reviews

Pros
  • Users value Corelight for its comprehensive security, offering exceptional network event insights and threat detection capabilities.
  • Users praise Corelight for its superior network telemetry, enhancing security detection and event clarity.
  • Users praise Corelight for its effective network telemetry, making security events easy to understand and actionable.
  • Users value the exceptional network security offered by Corelight, enabling easy detection of threats and efficient event analysis.
  • Users value the great network telemetry of Corelight, which simplifies security event analysis and enhances threat detection.
Cons
  • Users find the complex coding of Corelight challenging, especially for those without specialized knowledge.
  • Users find the complex configuration of Corelight difficult, especially for those without specialized knowledge or training.
  • Users find Corelight's complexity challenging, often requiring specialized knowledge and costly training for effective use.
  • Users find the complex setup of Corelight challenging, often requiring specialized knowledge and personalized training.
  • Users find the learning curve steep, making Corelight challenging for novice security analysts to navigate effectively.

What Are Recent G2 Reviews of Corelight?

DICE Central Station

DICE Central Station is built to reduce central station activity and data entry, providing a seamless interface for operators.

Average Rating: 4.3/5.0

Total Reviews: 7

How Do G2 Users Rate DICE Central Station?

  • Activity Monitoring: 7.9/10 (Category avg: 9.2/10)
  • Data Examination: 8.1/10 (Category avg: 8.7/10)
  • Ease of Use: 7.1/10 (Category avg: 8.8/10)
  • Log Management: 7.8/10 (Category avg: 9.2/10)

Who Is the Company Behind DICE Central Station?

  • Seller: DICE
  • Year Founded: 1985
  • HQ Location: Bay City, US
  • LinkedIn® Page: www.linkedin.com
    49 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 86% Medium, 14% Small

What Are Recent G2 Reviews of DICE Central Station?

What Are G2 Users Discussing About DICE Central Station?

Logmanager

Logmanager is a log management platform enhanced with SIEM capabilities that radically simplifies response to cyberthreats, legal compliance, and troubleshooting. By transforming diverse logs, events, metrics, and traces into actionable insights, it helps security and operations teams respond swiftly to any incident. With unmatched ease of use, peerless functionality, and flexibility, Logmanager ensures control over the entire technology stack. Visit logmanager.com.

Average Rating: 4.7/5.0

Total Reviews: 36

How Do G2 Users Rate Logmanager?

  • Ease of Use: 9.2/10 (Category avg: 8.8/10)
  • Log Management: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind Logmanager?

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 53% Small, 39% Medium

What Do G2 Reviewers Say About Logmanager?

AI-generated summary from verified user reviews

Pros
  • Users find Logmanager's ease of use enhances their experience with simple searches and rapid configuration.
  • Users appreciate the centralized log management of Logmanager, simplifying monitoring and enhancing troubleshooting across multiple systems.
  • Users appreciate the intuitive and customizable dashboard of Logmanager, enhancing their experience and ease of use.
  • Users commend the excellent customer support of Logmanager, finding the team responsive and helpful during implementation.
  • Users love the customization options of Logmanager, enhancing their experience with intuitive interfaces and tailored dashboards.
Cons
  • Users find difficult customization in Logmanager hampers usability and complicates specific use cases and configurations.
  • Users find the difficult setup of Logmanager frustrating, needing manual adjustments for backups that could be automated.
  • Users feel that Logmanager has limitations in customization and scalability, necessitating technical knowledge for effective use.
  • Users find that Logmanager has missing features that hinder automation and collaboration among administrators.
  • Users often face slow performance when exporting large reports, which can be frustrating during intensive tasks.

What Are Recent G2 Reviews of Logmanager?

NetWatch OPS

Netwatch OPS, Secure OPS, and AI Ops are three flagship products from netwatch.ai, designed to provide a unified and intelligent platform for managing and securing your entire IT environment. Each product serves a specific purpose, collectively enhancing the efficiency and security of IT operations. Netwatch OPS is a comprehensive monitoring solution that focuses on server, network, and application performance. It delivers real-time insights into hardware performance, network traffic, and application load, consolidating data across your infrastructure. This level of visibility ensures that systems operate at peak efficiency, allowing IT teams to identify and address issues before they escalate into significant problems. The tool is particularly beneficial for organizations that rely on complex IT infrastructures, enabling them to maintain optimal performance and minimize downtime. Secure OPS builds upon the foundational monitoring capabilities of Netwatch OPS by integrating advanced security features. This product continuously analyzes the IT environment for vulnerabilities, threats, and anomalies, providing proactive security insights. By identifying potential breaches before they occur, Secure OPS helps organizations safeguard their sensitive data and maintain compliance with industry regulations. This is especially crucial for businesses operating in sectors where data security is paramount, such as finance and healthcare. AI Ops leverages artificial intelligence and machine learning to automate the detection, analysis, and response to complex cybersecurity incidents. By synthesizing data from multiple sources, AI Ops prioritizes alerts based on severity and predicts potential issues, enabling rapid and effective responses. This automation not only reduces the burden on IT teams but also enhances the overall security posture of the organization. AI Ops is particularly useful for organizations facing a high volume of alerts, as it helps streamline incident management and ensures that critical threats are addressed promptly. The platform also features multi-channel alerting, delivering notifications via email, SMS, or integrations with collaboration tools like Slack and Microsoft Teams. Alerts are categorized by severity—Critical, Warning, or Information—allowing teams to prioritize their responses effectively. Additionally, incident escalation policies are embedded within the system, automating escalation procedures to ensure that critical issues receive prompt attention from the appropriate stakeholders. Together, Netwatch OPS, Secure OPS, and AI Ops form a comprehensive ecosystem that not only monitors and manages IT systems but also enhances security through intelligent automation and real-time analytics. This integrated approach positions netwatch.ai as a leader in innovative cybersecurity and IT operations management, providing organizations with the tools they need to navigate the complexities of modern IT environments.

Average Rating: 5.0/5.0

Total Reviews: 13

How Do G2 Users Rate NetWatch OPS?

  • Activity Monitoring: 10.0/10 (Category avg: 9.2/10)
  • Ease of Use: 9.3/10 (Category avg: 8.8/10)

Who Is the Company Behind NetWatch OPS?

  • Seller: NetWatch.Ai
  • Company Website:
  • Year Founded: 2023
  • HQ Location: Charlotte, North Carolina, United States
  • LinkedIn® Page: www.linkedin.com
    16 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 62% Medium, 31% Small

What Do G2 Reviewers Say About NetWatch OPS?

AI-generated summary from verified user reviews

Pros
  • Users value the automated alerting of NetWatch OPS, which greatly enhances efficiency and simplifies network monitoring tasks.
  • Users appreciate the automated alerts and graphs of NetWatch OPS, significantly saving time and enhancing monitoring efficiency.
  • Users value the automation of alerts and graphs, enabling time-saving monitoring without manual setup.
  • Users value the easy integrations of NetWatch OPS, enjoying automated alerts and streamlined monitoring processes.
  • Users value the automatic alerts and robust reporting features of NetWatch OPS, significantly enhancing their monitoring efficiency.

What Are Recent G2 Reviews of NetWatch OPS?

Open XDR Security Operations Platform

The Stellar Cyber Open XDR platform delivers comprehensive, unified security without complexity, empowering lean security teams of any skill to successfully secure their environments. With Stellar Cyber, organizations reduce risk with early and precise identification and remediation of threats while slashing costs, retaining investments in existing tools, and improving analyst productivity, delivering an 8x improvement in MTTD and a 20x improvement in MTTR. The company is based in Silicon Valley. For more information, visit stellarcyber.ai.

Average Rating: 4.9/5.0

Total Reviews: 8

How Do G2 Users Rate Open XDR Security Operations Platform?

  • Activity Monitoring: 9.7/10 (Category avg: 9.2/10)
  • Data Examination: 9.7/10 (Category avg: 8.7/10)
  • Ease of Use: 9.7/10 (Category avg: 8.8/10)
  • Log Management: 9.7/10 (Category avg: 9.2/10)

Who Is the Company Behind Open XDR Security Operations Platform?

  • Seller: STELLAR CYBER
  • Year Founded: 2017
  • HQ Location: San Jose, California, United States
  • LinkedIn® Page: www.linkedin.com
    150 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Medium, 25% Large

What Do G2 Reviewers Say About Open XDR Security Operations Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the seamless integrations of Open XDR, enhancing efficiency by unifying different security vendors' tools in one platform.
  • Users appreciate the easy integrations of Open XDR, enhancing threat detection without overhauling existing security systems.
  • Users value the comprehensive visibility provided by Open XDR, enabling a unified view of all security data sources.
  • Users value the effective threat detection capabilities of Open XDR, enhancing accuracy and reducing alert fatigue significantly.
  • Users appreciate the AI automation in Open XDR, enhancing threat detection speed and reducing alert fatigue significantly.
Cons
  • Users find the integration issues time-consuming, especially when connecting multiple tools or newly emerging solutions.
  • Users experience alerting issues that complicate operations, creating challenges with notifications and bulk assignments.
  • Users encounter troublesome alert management issues in Open XDR, leading to inefficiencies and increased workload during assignments.
  • Users face false positives that complicate alert management, creating unnecessary noise and impacting analyst efficiency.
  • Users face an inefficient alert system plagued by bugs, causing troubles with alerts during bulk assignments.

What Are Recent G2 Reviews of Open XDR Security Operations Platform?

Scanner

Scanner is a radically different way to detect threats in security data. Most security teams run a SIEM at the center of their stack. But SIEMs price on ingestion volume and cap retention at around 30 days, which forces a painful tradeoff: teams end up diverting 95% of their log data to object storage like S3 just to keep costs manageable. The result is a SIEM that covers a thin slice of your environment and a data lake full of logs no one can practically search or run detections against. Scanner works differently at every layer. Storage: We index semi-structured and unstructured log data directly in your S3 buckets. No ingestion pipelines, no re-ingestion, no schema work. Your data stays where it is. Detection: Logs stream into a numerically efficient cache where detections run continuously. There's no batch job, no scheduled query scanning your entire dataset. Detections operate on the stream itself. Investigation: When an analyst or agent runs a query, Scanner spins up short-lived compute that exists only for the duration of that query and then disappears. The indexes narrow the search space by orders of magnitude before any data is read, so even petabyte-scale queries resolve in seconds. Query compute is active less than 1% of the day. The rest of the time, it doesn't exist. The result is a system where petabytes of security data are searchable in seconds, detections run continuously, and costs scale with actual usage rather than data volume. Today, AI agents are Scanner's most prolific users, investigating alerts and hunting threats around the clock. Teams at Notion, Ramp, and Benchling use Scanner as their core security data layer.

Average Rating: 4.6/5.0

Total Reviews: 7

How Do G2 Users Rate Scanner?

  • Data Examination: 10.0/10 (Category avg: 8.7/10)
  • Ease of Use: 8.3/10 (Category avg: 8.8/10)
  • Log Management: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind Scanner?

  • Seller: Scanner
  • Company Website:
  • Year Founded: 2022
  • HQ Location: San Francisco, US
  • LinkedIn® Page: www.linkedin.com
    11 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 29% Small, 14% Medium

What Do G2 Reviewers Say About Scanner?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of Scanner, enabling quick setup and fast, efficient queries on large datasets.
  • Users highlight the impressive search efficiency of Scanner, enabling rapid access to vast amounts of indexed data.
  • Users appreciate the flexibility in log ingestion, enabling quick data input and efficient querying from AWS S3 buckets.
  • Users value the exceptional customer support of Scanner, noting the team's responsiveness to feature requests and feedback.
  • Users highlight the impressive detection efficiency of Scanner, enabling rapid searches and effective data management.
Cons
  • Users face logging issues due to insufficient documentation, lack of source monitoring, and challenges in re-ingesting missed data.
  • Users express frustration with the limited and poorly documented complex querying capabilities, hindering seamless tool integration.
  • Users often face challenges with inadequate data management documentation, which complicates querying and log source monitoring.
  • Users note the immaturity of Scanner, citing limited features and ongoing updates as potential challenges for teams.
  • Users note the lack of features in Scanner.dev, as it's still developing compared to established competitors.

What Are Recent G2 Reviews of Scanner?

Trellix Helix

Trellix Helix integrates your security tools and augments them with next-generation security information and event management (SIEM), orchestration, and threat intelligence capabilities to capture the untapped potential of security investments.

Average Rating: 4.3/5.0

Total Reviews: 11

How Do G2 Users Rate Trellix Helix?

  • Activity Monitoring: 9.2/10 (Category avg: 9.2/10)
  • Data Examination: 9.2/10 (Category avg: 8.7/10)
  • Ease of Use: 9.1/10 (Category avg: 8.8/10)
  • Log Management: 9.2/10 (Category avg: 9.2/10)

Who Is the Company Behind Trellix Helix?

  • Seller: Trellix
  • Year Founded: 2004
  • HQ Location: Plano, TX
  • LinkedIn® Page: www.linkedin.com
    3,811 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 64% Large, 18% Medium

What Do G2 Reviewers Say About Trellix Helix?

AI-generated summary from verified user reviews

Pros
  • Users value the real-time threat detection and automated AI/ML responses of Trellix Helix, enhancing security efficacy.
  • Users value the automated response capabilities of Trellix Helix, enhancing efficiency and security through AI/ML technology.
  • Users value the automation capabilities of Trellix Helix, facilitating efficient threat detection and response with ease.
  • Users appreciate the flexible and scalable architecture of Trellix Helix, ensuring easy integration and implementation.
  • Users value the real-time threat detection provided by Trellix Helix, enhancing their cybersecurity measures effectively.

What Are Recent G2 Reviews of Trellix Helix?

Singularity AI SIEM

Secure your entire organization with the industry's fastest AI-powered open platform for all your data and workflows—built on the SentinelOne Singularity™ Data Lake. Singularity AI SIEM is designed for the autonomous SOC, empowering your security operations center to operate at peak efficiency. By leveraging AI and automation, our SIEM solution enables you to: Detect and respond to threats faster Improve overall security posture Reduce false positives and noise Allocate resources more effectively

Average Rating: 4.5/5.0

Total Reviews: 6

How Do G2 Users Rate Singularity AI SIEM?

  • Activity Monitoring: 10.0/10 (Category avg: 9.2/10)
  • Data Examination: 10.0/10 (Category avg: 8.7/10)
  • Ease of Use: 9.3/10 (Category avg: 8.8/10)
  • Log Management: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind Singularity AI SIEM?

  • Seller: SentinelOne
  • Company Website:
  • Year Founded: 2013
  • HQ Location: Mountain View, CA
  • LinkedIn® Page: www.linkedin.com
    3,529 employees on LinkedIn®
  • Ownership: NASDAQ: S

Who Uses This Product?

  • Company Size: 50% Medium, 33% Small

What Do G2 Reviewers Say About Singularity AI SIEM?

AI-generated summary from verified user reviews

Pros
  • Users value the advanced AI-powered capabilities of Singularity AI SIEM, enhancing threat detection and response efficiency.
  • Users appreciate the attentive customer support of Singularity AI SIEM, enhancing their overall experience and confidence in the product.
  • Users praise the detection accuracy of Singularity AI SIEM, enhancing their ability to swiftly identify and manage threats.
  • Users value the user-friendly interface of Singularity AI SIEM, enhancing efficiency in threat management for all experience levels.
  • Users commend the efficiency of Singularity AI SIEM, allowing faster identification and resolution of security threats.
Cons
  • Users find the complexity of initial setup for Singularity AI SIEM to be a significant drawback in their experience.
  • Users find the complex setup of Singularity AI SIEM challenging, impacting their overall experience with the product.
  • Users find the high cost of Singularity AI SIEM to be a significant drawback compared to its competitors.
  • Users note the high cost and complexity of setting up Singularity AI SIEM, affecting overall user experience.
  • Users highlight the limited features of Singularity AI SIEM, noting drawbacks compared to more established platforms.

What Are Recent G2 Reviews of Singularity AI SIEM?

Devo

Devo unlocks the full value of machine data for the world’s most instrumented enterprises by putting more data to work now. With Devo, IT executives finally realize the transformational promise of machine data to drive breakthrough projects that move the entire business forward. Born for today’s fully instrumented world, the Devo platform is purpose-built for both the sheer volume of data generated today, and the crushing demands of automation and the millions of algorithms that need to consume machine data. Our unique No-Compromise Architecture frees IT from the painful constraints of existing enterprise log management (ELM) systems, ingesting petabytes daily with blistering speed with no re-architecting required, even as data volumes explode. All machine data is unified, hot, and ready to use across multiple teams and use cases, from the moment of ingestion, for as long as you want to retain it – no limits. Only Devo combines real-time streams with historical data for fully contextual analytics, delivering 10x faster response times for tens of thousands of simultaneous queries. Devo powers the world’s most instrumented enterprises – Telefonica, Caixa Bank, Panda Security and 1000+ more worldwide – all realizing game-changing economics and compounding value from their machine data. Visit www.devo.com to learn more.

Average Rating: 4.3/5.0

Total Reviews: 5

How Do G2 Users Rate Devo?

  • Activity Monitoring: 3.3/10 (Category avg: 9.2/10)
  • Data Examination: 5.0/10 (Category avg: 8.7/10)
  • Ease of Use: 9.2/10 (Category avg: 8.8/10)
  • Log Management: 5.0/10 (Category avg: 9.2/10)

Who Is the Company Behind Devo?

  • Seller: Devo
  • Year Founded: 2011
  • HQ Location: Boston, Massachusetts, United States
  • LinkedIn® Page: www.linkedin.com
    498 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 40% Medium, 40% Small

What Are Recent G2 Reviews of Devo?

What Are G2 Users Discussing About Devo?

LogLogic SIEM

LogLogic SIEM, developed by LogLogic , is a comprehensive Security Information and Event Management solution designed to centralize and analyze IT data across an organization's infrastructure. It enables enterprises to collect, manage, and interpret log data from various sources, including network devices, servers, databases, and applications, facilitating enhanced security, compliance, and operational efficiency. Key Features and Functionality: - Universal Collection Framework : A WAN-aware, encrypted, and compressed data transport system that ensures resilient and efficient log data collection across distributed environments. - Log Labels: An enterprise-class data description technology that structures and organizes text-based data, allowing for intelligent parsing and management of logs from diverse applications and devices. - User-Centric Interface: A streamlined management interface designed to reduce remediation and discovery times, enhancing workflow efficiency. - Virtual Appliance Deployment: Offers a full-service virtual SIEM solution via VMware technology, providing flexibility and scalability for businesses with space-constrained or widely distributed IT environments. - Compliance Management: Includes a Compliance Suite with customizable reports and alerts mapped to major regulations such as PCI DSS, HIPAA, and SOX, aiding organizations in meeting compliance mandates. Primary Value and Problem Solved: LogLogic SIEM addresses the critical need for organizations to monitor, analyze, and respond to security events and compliance requirements effectively. By centralizing log data collection and analysis, it provides real-time insights into network security, user activities, and system performance. This comprehensive visibility enables rapid identification of compliance violations, policy breaches, cyberattacks, and insider threats, thereby enhancing an organization's security posture and operational efficiency.

Average Rating: 4.4/5.0

Total Reviews: 5

How Do G2 Users Rate LogLogic SIEM?

  • Activity Monitoring: 10.0/10 (Category avg: 9.2/10)
  • Data Examination: 8.3/10 (Category avg: 8.7/10)
  • Ease of Use: 7.5/10 (Category avg: 8.8/10)
  • Log Management: 9.2/10 (Category avg: 9.2/10)

Who Is the Company Behind LogLogic SIEM?

  • Seller: LogLogic
  • Year Founded: 1994
  • HQ Location: Horley, GB
  • LinkedIn® Page: www.linkedin.com
    1 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 60% Large, 20% Medium

What Are Recent G2 Reviews of LogLogic SIEM?

What Are G2 Users Discussing About LogLogic SIEM?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 31, 2024