Best Security Information and Event Management (SIEM) Software Solutions - Page 4

How Many Security Information and Event Management (SIEM) Software Products Does G2 Track?

Total Products under this Category: 153

Category Stats (Nov 2026)

  • Average Rating: 4.47/5 (↑0.01 vs Oct 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Singularity AI SIEM (+2.27%) - Among all products in this category, Singularity AI SIEM recorded the largest rating increase compared to last month

Last updated: November 02, 2026

How Does G2 Rank Security Information and Event Management (SIEM) Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 6,600+ Authentic Reviews
  • 153+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Security Information and Event Management (SIEM) Software

G2 Grid® for Security Information and Event Management (SIEM) Software plotting products by satisfaction and market presence

Highlighted products: Google Security Operations, CrowdStrike Falcon Endpoint Protection Platform, Palo Alto Cortex XSIAM, Sumo Logic, Huntress Managed SIEM, Todyl Security Platform, ManageEngine ADAudit Plus, and Elastic Security.

Underlying data: [Grid® JSON](https://www.g2.com/categories/security-information-and-event-management-siem/grids.json?focus%5B%5D=google-security-operations&focus%5B%5D=crowdstrike-falcon-endpoint-protection-platform&focus%5B%5D=palo-alto-cortex-xsiam&focus%5B%5D=sumo-logic&focus%5B%5D=huntress-managed-siem&focus%5B%5D=todyl-security-platform&focus%5B%5D=manageengine-adaudit-plus&focus%5B%5D=elastic-elastic-security)

InsightOps

Ridiculously easy log management is just the beginning

Average Rating: 3.1/5.0

Total Reviews: 11

How Do G2 Users Rate InsightOps?

  • Activity Monitoring: 10.0/10 (Category avg: 9.2/10)
  • Data Examination: 10.0/10 (Category avg: 8.7/10)
  • Ease of Use: 6.5/10 (Category avg: 8.8/10)
  • Log Management: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind InsightOps?

  • Seller: Rapid7
  • Year Founded: 2000
  • HQ Location: Boston, MA
  • LinkedIn® Page: www.linkedin.com
    8,746 employees on LinkedIn®
  • Ownership: NASDAQ:RPD
  • Total Revenue (USD mm): $411

Who Uses This Product?

  • Top Industries: Computer Software
  • Company Size: 73% Small, 27% Medium

What Are Recent G2 Reviews of InsightOps?

Fluency SIEM

Fluency is an AI-centric SIEM that turns security activity into prioritized cases, evidence-backed answers, and a clearer plan for running security operations. It combines a powerful SIEM foundation with the ability to analyze, forecast, and compare across the work of analysts, security leaders, and MSSPs. Fluency’s user and entity behavior analytics (UEBA), behavioral change detection, correlation, clustering, and risk scoring bring related activity together and prioritize the issues that need attention. Large volumes of events become fewer, more meaningful cases. That foundation gives both analysts and AI agents the context to investigate effectively. The same understanding extends beyond investigations. Teams can examine coverage gaps, system health, throughput, usage, and billing. Leaders can compare environments and performance over time, forecast capacity and cost, and identify where improvements are needed. Fluency helps them answer three essential questions: What is happening? What comes next? What needs to change? Fluency also supports compliance and certification readiness by analyzing available security evidence and documented processes. It helps teams distinguish controls supported by evidence from those that are partially supported or not yet demonstrated, identify missing evidence, and prioritize remediation. This operational analysis complements compliance platforms such as Vanta and Drata. Fluency’s Model Context Protocol (MCP) server makes these capabilities accessible through AI clients such as Claude and Codex. It supplies tools, context, and operational guidance that help agents select capabilities, combine them into workflows, and interpret results within the user’s permissions and customer scope. Findings become reports and operational artifacts in Fluency Companion, where the team can review and act on the work. Fluency backs that technology with hands-on deployment and ongoing support. Its team helps customers overcome integration obstacles, establish useful workflows, and build operational capability—including managing multiple customer environments for MSSPs. Recognized for Best Support in G2’s Fall 2026 reports, Fluency pairs security intelligence with the experience and support to put it to work.

Average Rating: 4.9/5.0

Total Reviews: 16

How Do G2 Users Rate Fluency SIEM?

  • Activity Monitoring: 9.6/10 (Category avg: 9.2/10)
  • Data Examination: 9.5/10 (Category avg: 8.7/10)
  • Ease of Use: 8.0/10 (Category avg: 8.8/10)
  • Log Management: 9.5/10 (Category avg: 9.2/10)

Who Is the Company Behind Fluency SIEM?

  • Seller: Fluency Security
  • Company Website:
  • Year Founded: 2013
  • HQ Location: Greenbelt, Maryland
  • LinkedIn® Page: www.linkedin.com
    7 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security
  • Company Size: 56% Medium, 25% Small

What Are Recent G2 Reviews of Fluency SIEM?

Trellix Enterprise Security Manager

Trellix EnterprisTrellix Enterprise Security Manager (ESM) is a highly scalable Security Information and Event Management (SIEM) solution delivering real-time visibility across systems, networks, databases, and applications. Engineered for speed, ESM collects and correlates data from over 460 integrated technologies to provide actionable threat intelligence. It stores billions of events, offering immediate ad-hoc query capabilities, rapid forensics, and historical rule validation without impacting performance. ESM empowers security operations center (SOC) teams to automate and coordinate incident response through advanced bi-directional integrations. To streamline operations, the platform includes hundreds of customizable dashboards, reports, and correlation rules. Robust compliance features help organizations seamlessly address regulatory frameworks. With flexible hybrid deployment options (on-premises, virtual, or cloud), Trellix ESM accelerates threat detection, prioritizes alerts, and unifies security operations within a single centralized platform.

Average Rating: 4.1/5.0

Total Reviews: 37

How Do G2 Users Rate Trellix Enterprise Security Manager?

  • Activity Monitoring: 7.9/10 (Category avg: 9.2/10)
  • Data Examination: 8.1/10 (Category avg: 8.7/10)
  • Ease of Use: 8.1/10 (Category avg: 8.8/10)
  • Log Management: 8.1/10 (Category avg: 9.2/10)

Who Is the Company Behind Trellix Enterprise Security Manager?

  • Seller: Trellix
  • Year Founded: 2004
  • HQ Location: Plano, TX
  • LinkedIn® Page: www.linkedin.com
    3,811 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 42% Large, 29% Medium

What Do G2 Reviewers Say About Trellix Enterprise Security Manager?

AI-generated summary from verified user reviews

Pros
  • Users value the instant access to log data, enhancing their ability to monitor and respond to security incidents efficiently.
  • Users value the dashboard customization options in Trellix Enterprise Security Manager for their clarity and efficiency.
  • Users appreciate the dashboard usability of Trellix Enterprise Security Manager, finding it clear and efficient for quick checks.
  • Users benefit from the efficient debugging capabilities of Trellix Enterprise Security Manager, resolving issues quickly and effectively.
  • Users appreciate the ease of use of Trellix Enterprise Security Manager, enjoying its intuitive dashboard and alarm features.
Cons
  • Users find difficult customization for dashboards and reports time-consuming and requires significant technical expertise for effective use.
  • Users find the difficult navigation of Trellix Enterprise Security Manager frustrating due to its outdated UI and non-scrollable windows.
  • Users find Trellix Enterprise Security Manager to be expensive, especially for large-scale deployments with limited budgets.
  • Users encounter faulty detection issues, leading to frustrating false positives and limiting the product's effectiveness.
  • Users experience integration issues that hinder customization and complicate dashboard setup, impacting overall usability.

What Are Recent G2 Reviews of Trellix Enterprise Security Manager?

What Are G2 Users Discussing About Trellix Enterprise Security Manager?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

BMC AMI Ops

BMC AMI Ops is an AI-driven mainframe operations management solution for IBM Z environments. It helps enterprises monitor, automate, and optimize the performance and availability of mission-critical systems while reducing operational complexity and manual effort. BMC AMI Ops uses real-time monitoring, intelligent automation, and predictive analytics to detect issues early, prioritize actions, and resolve problems faster across z/OS, Db2, IMS, and supporting infrastructure. The solution enables operations teams to shift from reactive monitoring to proactive, service-focused operations. Key capabilities include: - Real-time and predictive monitoring of mainframe workloads and resources - Intelligent automation to reduce manual intervention and operator dependency - Root cause analysis and anomaly detection to accelerate problem resolution - Service-level visibility aligned to business outcomes - On-premises execution that keeps operational data on the mainframe By modernizing mainframe operations with AI and automation, BMC AMI Ops helps organizations improve system reliability, reduce downtime, and operate IBM Z environments more efficiently at scale.

Average Rating: 4.2/5.0

Total Reviews: 72

How Do G2 Users Rate BMC AMI Ops?

  • Activity Monitoring: 10.0/10 (Category avg: 9.2/10)
  • Ease of Use: 8.5/10 (Category avg: 8.8/10)
  • Log Management: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind BMC AMI Ops?

  • Seller: BMC Software
  • Company Website:
  • Year Founded: 1980
  • HQ Location: Houston, TX
  • LinkedIn® Page: www.linkedin.com
    8,646 employees on LinkedIn®
  • Phone: 713 918 8800

Who Uses This Product?

  • Top Industries: Information Technology and Services, Banking
  • Company Size: 43% Large, 34% Small

What Are Recent G2 Reviews of BMC AMI Ops?

What Are G2 Users Discussing About BMC AMI Ops?

DNIF HYPERCLOUD

DNIF HYPERCLOUD is a cloud native platform that brings the functionality of SIEM, UEBA and SOAR into a single continuous workflow to solve cybersecurity challenges at scale. DNIF HYPERCLOUD is the flagship SaaS platform from NETMONASTERY that delivers key detection functionality using big data analytics and machine learning. NETMONASTERY aims to deliver a platform that helps customers in ingesting machine data and automatically identify anomalies in these data streams using machine learning and outlier detection algorithms. The objective is to make it easy for untrained engineers and analysts to use the platform and extract benefit reliably and efficiently.

Average Rating: 4.2/5.0

Total Reviews: 10

How Do G2 Users Rate DNIF HYPERCLOUD?

  • Activity Monitoring: 8.9/10 (Category avg: 9.2/10)
  • Data Examination: 7.8/10 (Category avg: 8.7/10)
  • Ease of Use: 8.8/10 (Category avg: 8.8/10)
  • Log Management: 8.9/10 (Category avg: 9.2/10)

Who Is the Company Behind DNIF HYPERCLOUD?

  • Seller: DNIF
  • Year Founded: 2002
  • HQ Location: Mountain View, California
  • LinkedIn® Page: www.linkedin.com
    55 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 45% Medium, 36% Large

What Are Recent G2 Reviews of DNIF HYPERCLOUD?

Corelight

Corelight's Open Network Detection and Response (NDR) Platform improves network detection coverage, accelerates incident response, and reduces operational costs by consolidating NDR, intrusion detection (IDS), and PCAP functionality in a single solution and by providing security analysts with machine learning-assisted investigations and one-click-pivots from prioritized alerts to the evidence needed to investigate and remediate them. Network Detection and Response platforms monitor and analyze network traffic, delivering telemetry into existing SIEM, XDR, or SaaS-based solutions. Corelight’s platform is unique because our detections and visibility engineering are community driven—with continuous content creation from Zeek®, Suricata IDS, and other Intel communities. And our integration with CrowdStrike XDR enables cross platform (EDR+NDR) analytics. This provides you with the most complete network visibility, powerful analytics, and threat hunting capabilities, and accelerates investigation across your entire kill chain. Corelight also delivers a comprehensive suite of network security analytics that help organizations identify more than 75 adversarial TTPs across the MITRE ATT&CK® spectrum including Exfiltration, Command and Control (C2), and Lateral Movement. These detections reveal known and unknown threats via hundreds of unique insights and alerts across machine learning, behavioral analysis, and signature-based approaches. CORELIGHT PRODUCTS + SERVICES Open NDR Platform Appliance, Cloud, Software, Virtual and SaaS Sensors IDS Fleet Manager Investigator Threat Hunting Platform Smart PCAP Corelight Training CERTIFICATIONS FIPS 140-2

Average Rating: 4.6/5.0

Total Reviews: 20

How Do G2 Users Rate Corelight?

  • Activity Monitoring: 9.0/10 (Category avg: 9.2/10)
  • Data Examination: 8.9/10 (Category avg: 8.7/10)
  • Ease of Use: 8.5/10 (Category avg: 8.8/10)
  • Log Management: 8.9/10 (Category avg: 9.2/10)

Who Is the Company Behind Corelight?

  • Seller: Corelight
  • Year Founded: 2013
  • HQ Location: San Francisco, CA
  • LinkedIn® Page: www.linkedin.com
    483 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 50% Medium, 50% Large

What Do G2 Reviewers Say About Corelight?

AI-generated summary from verified user reviews

Pros
  • Users value the comprehensive security features of Corelight, enabling effective detection of network threats and easier event analysis.
  • Users value Corelight for its excellent network telemetry, making security events easy to understand and manage.
  • Users appreciate the great network telemetry of Corelight, effectively presenting and correlating security network events.
  • Users value the effective security features of Corelight, which enhance the detection of network threats efficiently.
  • Users praise Corelight's exceptional security features for effectively detecting threats and presenting network events clearly.
Cons
  • Users find Corelight's setup to be complex and difficult, often requiring specialized training to use effectively.
  • Users find Corelight's setup and management complex and challenging, requiring specialized knowledge beyond beginner analysts.
  • Users find Corelight's complexity challenging, especially for novice analysts requiring costly personalized training.
  • Users find the complex setup of Corelight challenging, especially for those without specialized knowledge or training.
  • Users find Corelight has a steep learning curve, making it challenging for novice security analysts to effectively use.

What Are Recent G2 Reviews of Corelight?

DICE Central Station

DICE Central Station is built to reduce central station activity and data entry, providing a seamless interface for operators.

Average Rating: 4.3/5.0

Total Reviews: 7

How Do G2 Users Rate DICE Central Station?

  • Activity Monitoring: 7.9/10 (Category avg: 9.2/10)
  • Data Examination: 8.1/10 (Category avg: 8.7/10)
  • Ease of Use: 7.1/10 (Category avg: 8.8/10)
  • Log Management: 7.8/10 (Category avg: 9.2/10)

Who Is the Company Behind DICE Central Station?

  • Seller: DICE
  • Year Founded: 1985
  • HQ Location: Bay City, US
  • LinkedIn® Page: www.linkedin.com
    49 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 86% Medium, 14% Small

What Are Recent G2 Reviews of DICE Central Station?

What Are G2 Users Discussing About DICE Central Station?

Logmanager

Logmanager is a log management platform enhanced with SIEM capabilities that radically simplifies response to cyberthreats, legal compliance, and troubleshooting. By transforming diverse logs, events, metrics, and traces into actionable insights, it helps security and operations teams respond swiftly to any incident. With unmatched ease of use, peerless functionality, and flexibility, Logmanager ensures control over the entire technology stack. Visit logmanager.com.

Average Rating: 4.7/5.0

Total Reviews: 36

How Do G2 Users Rate Logmanager?

  • Ease of Use: 9.2/10 (Category avg: 8.8/10)
  • Log Management: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind Logmanager?

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 53% Small, 39% Medium

What Do G2 Reviewers Say About Logmanager?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Logmanager, enjoying seamless deployment and reliable log management.
  • Users appreciate the seamless log management capabilities of Logmanager, enabling efficient and centralized operations without hassle.
  • Users value the clean and intuitive dashboard of Logmanager, enabling easy customization and quick insights.
  • Users appreciate the responsive customer support of Logmanager, enhancing their experience with reliable assistance whenever needed.
  • Users value the flexible customization options in Logmanager, enhancing their monitoring experience effortlessly.
Cons
  • Users find the difficult customization of Logmanager limits its usability and complicates specific configurations.
  • Users face a difficult setup process initially, although support helps resolve issues quickly.
  • Users find the limitations in automation and advanced features to be a hurdle for efficient log management.
  • Users feel the missing features in Logmanager hinder automation and advanced security analysis capabilities.
  • Users experience slow performance when exporting large reports, impacting efficiency with extensive datasets.

What Are Recent G2 Reviews of Logmanager?

NetWatch OPS

Netwatch OPS, Secure OPS, and AI Ops are three flagship products from netwatch.ai, designed to provide a unified and intelligent platform for managing and securing your entire IT environment. Each product serves a specific purpose, collectively enhancing the efficiency and security of IT operations. Netwatch OPS is a comprehensive monitoring solution that focuses on server, network, and application performance. It delivers real-time insights into hardware performance, network traffic, and application load, consolidating data across your infrastructure. This level of visibility ensures that systems operate at peak efficiency, allowing IT teams to identify and address issues before they escalate into significant problems. The tool is particularly beneficial for organizations that rely on complex IT infrastructures, enabling them to maintain optimal performance and minimize downtime. Secure OPS builds upon the foundational monitoring capabilities of Netwatch OPS by integrating advanced security features. This product continuously analyzes the IT environment for vulnerabilities, threats, and anomalies, providing proactive security insights. By identifying potential breaches before they occur, Secure OPS helps organizations safeguard their sensitive data and maintain compliance with industry regulations. This is especially crucial for businesses operating in sectors where data security is paramount, such as finance and healthcare. AI Ops leverages artificial intelligence and machine learning to automate the detection, analysis, and response to complex cybersecurity incidents. By synthesizing data from multiple sources, AI Ops prioritizes alerts based on severity and predicts potential issues, enabling rapid and effective responses. This automation not only reduces the burden on IT teams but also enhances the overall security posture of the organization. AI Ops is particularly useful for organizations facing a high volume of alerts, as it helps streamline incident management and ensures that critical threats are addressed promptly. The platform also features multi-channel alerting, delivering notifications via email, SMS, or integrations with collaboration tools like Slack and Microsoft Teams. Alerts are categorized by severity—Critical, Warning, or Information—allowing teams to prioritize their responses effectively. Additionally, incident escalation policies are embedded within the system, automating escalation procedures to ensure that critical issues receive prompt attention from the appropriate stakeholders. Together, Netwatch OPS, Secure OPS, and AI Ops form a comprehensive ecosystem that not only monitors and manages IT systems but also enhances security through intelligent automation and real-time analytics. This integrated approach positions netwatch.ai as a leader in innovative cybersecurity and IT operations management, providing organizations with the tools they need to navigate the complexities of modern IT environments.

Average Rating: 5.0/5.0

Total Reviews: 13

How Do G2 Users Rate NetWatch OPS?

  • Activity Monitoring: 10.0/10 (Category avg: 9.2/10)
  • Ease of Use: 9.3/10 (Category avg: 8.8/10)

Who Is the Company Behind NetWatch OPS?

  • Seller: NetWatch.Ai
  • Company Website:
  • Year Founded: 2023
  • HQ Location: Charlotte, North Carolina, United States
  • LinkedIn® Page: www.linkedin.com
    16 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 62% Medium, 31% Small

What Do G2 Reviewers Say About NetWatch OPS?

AI-generated summary from verified user reviews

Pros
  • Users value the automated alerting capabilities of NetWatch OPS, significantly enhancing efficiency and network management.
  • Users value the automated alerts in NetWatch OPS, greatly enhancing efficiency in network monitoring tasks.
  • Users value the automation of alerts and graphs in NetWatch OPS, significantly improving efficiency and focus on critical tasks.
  • Users value the easy integrations of NetWatch OPS, simplifying alert creation and enhancing overall monitoring efficiency.
  • Users appreciate the automation of alerts and graphs in NetWatch OPS, saving time and enhancing monitoring efficiency.

What Are Recent G2 Reviews of NetWatch OPS?

Open XDR Security Operations Platform

The Stellar Cyber Open XDR platform delivers comprehensive, unified security without complexity, empowering lean security teams of any skill to successfully secure their environments. With Stellar Cyber, organizations reduce risk with early and precise identification and remediation of threats while slashing costs, retaining investments in existing tools, and improving analyst productivity, delivering an 8x improvement in MTTD and a 20x improvement in MTTR. The company is based in Silicon Valley. For more information, visit stellarcyber.ai.

Average Rating: 4.9/5.0

Total Reviews: 8

How Do G2 Users Rate Open XDR Security Operations Platform?

  • Activity Monitoring: 9.7/10 (Category avg: 9.2/10)
  • Data Examination: 9.7/10 (Category avg: 8.7/10)
  • Ease of Use: 9.7/10 (Category avg: 8.8/10)
  • Log Management: 9.7/10 (Category avg: 9.2/10)

Who Is the Company Behind Open XDR Security Operations Platform?

  • Seller: STELLAR CYBER
  • Year Founded: 2017
  • HQ Location: San Jose, California, United States
  • LinkedIn® Page: www.linkedin.com
    150 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Medium, 25% Large

What Do G2 Reviewers Say About Open XDR Security Operations Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the seamless integrations of Open XDR, enhancing efficiency by unifying different security vendors' tools in one platform.
  • Users appreciate the easy integrations of Open XDR, enhancing threat detection without overhauling existing security systems.
  • Users value the comprehensive visibility provided by Open XDR, enabling a unified view of all security data sources.
  • Users value the effective threat detection capabilities of Open XDR, enhancing accuracy and reducing alert fatigue significantly.
  • Users appreciate the AI automation in Open XDR, enhancing threat detection speed and reducing alert fatigue significantly.
Cons
  • Users find the integration issues time-consuming, especially when connecting multiple tools or newly emerging solutions.
  • Users experience alerting issues that complicate operations, creating challenges with notifications and bulk assignments.
  • Users encounter troublesome alert management issues in Open XDR, leading to inefficiencies and increased workload during assignments.
  • Users face false positives that complicate alert management, creating unnecessary noise and impacting analyst efficiency.
  • Users face an inefficient alert system plagued by bugs, causing troubles with alerts during bulk assignments.

What Are Recent G2 Reviews of Open XDR Security Operations Platform?

Scanner

Scanner is a radically different way to detect threats in security data. Most security teams run a SIEM at the center of their stack. But SIEMs price on ingestion volume and cap retention at around 30 days, which forces a painful tradeoff: teams end up diverting 95% of their log data to object storage like S3 just to keep costs manageable. The result is a SIEM that covers a thin slice of your environment and a data lake full of logs no one can practically search or run detections against. Scanner works differently at every layer. Storage: We index semi-structured and unstructured log data directly in your S3 buckets. No ingestion pipelines, no re-ingestion, no schema work. Your data stays where it is. Detection: Logs stream into a numerically efficient cache where detections run continuously. There's no batch job, no scheduled query scanning your entire dataset. Detections operate on the stream itself. Investigation: When an analyst or agent runs a query, Scanner spins up short-lived compute that exists only for the duration of that query and then disappears. The indexes narrow the search space by orders of magnitude before any data is read, so even petabyte-scale queries resolve in seconds. Query compute is active less than 1% of the day. The rest of the time, it doesn't exist. The result is a system where petabytes of security data are searchable in seconds, detections run continuously, and costs scale with actual usage rather than data volume. Today, AI agents are Scanner's most prolific users, investigating alerts and hunting threats around the clock. Teams at Notion, Ramp, and Benchling use Scanner as their core security data layer.

Average Rating: 4.6/5.0

Total Reviews: 7

How Do G2 Users Rate Scanner?

  • Data Examination: 10.0/10 (Category avg: 8.7/10)
  • Ease of Use: 8.3/10 (Category avg: 8.8/10)
  • Log Management: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind Scanner?

  • Seller: Scanner
  • Company Website:
  • Year Founded: 2022
  • HQ Location: San Francisco, US
  • LinkedIn® Page: www.linkedin.com
    11 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 29% Small, 14% Medium

What Do G2 Reviewers Say About Scanner?

AI-generated summary from verified user reviews

Pros
  • Users highlight the ease of use of Scanner, enabling quick queries and efficient log management effortlessly.
  • Users rave about the search efficiency of Scanner, with queries returning results in seconds across vast datasets.
  • Users highlight the fast querying speed of Scanner, allowing efficient log management and quick data exploration.
  • Users value the exceptional customer support from Scanner.dev, highlighting their responsiveness and commitment to user feedback.
  • Users commend the impressive detection efficiency of Scanner, enabling rapid querying and indexing of vast datasets.
Cons
  • Users face challenges with logging issues, lacking documentation and reliable monitoring, complicating data ingestion and management.
  • Users find the complex querying limitations frustrating, hindering seamless adoption as a direct tool replacement.
  • Users struggle with inadequate documentation and lack of multiple source detection, complicating data management and ingestion.
  • Users note the immaturity of Scanner, with limited features and complexities, making it harder for immediate replacement.
  • Users note the lack of features in Scanner due to its early stage, impacting teams seeking comprehensive solutions.

What Are Recent G2 Reviews of Scanner?

Trellix Helix

Trellix Helix integrates your security tools and augments them with next-generation security information and event management (SIEM), orchestration, and threat intelligence capabilities to capture the untapped potential of security investments.

Average Rating: 4.3/5.0

Total Reviews: 11

How Do G2 Users Rate Trellix Helix?

  • Activity Monitoring: 9.2/10 (Category avg: 9.2/10)
  • Data Examination: 9.2/10 (Category avg: 8.7/10)
  • Ease of Use: 9.1/10 (Category avg: 8.8/10)
  • Log Management: 9.2/10 (Category avg: 9.2/10)

Who Is the Company Behind Trellix Helix?

  • Seller: Trellix
  • Year Founded: 2004
  • HQ Location: Plano, TX
  • LinkedIn® Page: www.linkedin.com
    3,811 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 64% Large, 18% Medium

What Do G2 Reviewers Say About Trellix Helix?

AI-generated summary from verified user reviews

Pros
  • Users value the real-time threat detection and automated AI/ML responses of Trellix Helix, enhancing security efficiency.
  • Users value the automated response capabilities of Trellix Helix, enhancing security with quick, AI-driven threat mitigation.
  • Users value the automation capabilities of Trellix Helix for enhancing security responses and simplifying operations.
  • Users value the flexible and scalable architecture of Trellix Helix, facilitating easy integration and implementation.
  • Users appreciate the real-time threat detection of Trellix Helix, enhancing security with automated responses and easy integration.

What Are Recent G2 Reviews of Trellix Helix?

Singularity AI SIEM

Secure your entire organization with the industry's fastest AI-powered open platform for all your data and workflows—built on the SentinelOne Singularity™ Data Lake. Singularity AI SIEM is designed for the autonomous SOC, empowering your security operations center to operate at peak efficiency. By leveraging AI and automation, our SIEM solution enables you to: Detect and respond to threats faster Improve overall security posture Reduce false positives and noise Allocate resources more effectively

Average Rating: 4.5/5.0

Total Reviews: 6

How Do G2 Users Rate Singularity AI SIEM?

  • Activity Monitoring: 10.0/10 (Category avg: 9.2/10)
  • Data Examination: 10.0/10 (Category avg: 8.7/10)
  • Ease of Use: 9.3/10 (Category avg: 8.8/10)
  • Log Management: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind Singularity AI SIEM?

  • Seller: SentinelOne
  • Company Website:
  • Year Founded: 2013
  • HQ Location: Mountain View, CA
  • LinkedIn® Page: www.linkedin.com
    3,529 employees on LinkedIn®
  • Ownership: NASDAQ: S

Who Uses This Product?

  • Company Size: 50% Medium, 33% Small

What Do G2 Reviewers Say About Singularity AI SIEM?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the sophisticated AI-powered capabilities of Singularity AI SIEM, enhancing their threat detection and response efficiency.
  • Users value the attentive customer support of Singularity AI SIEM, enhancing their overall experience and effectiveness.
  • Users value the high detection accuracy of Singularity AI SIEM, enhancing their ability to swiftly address security threats.
  • Users value the user-friendly interface of Singularity AI SIEM, making threat management accessible for all skill levels.
  • Users appreciate the efficiency of Singularity AI SIEM, enabling faster threat identification and response than traditional tools.
Cons
  • Users find the initial setup complex, which may lead to a steeper learning curve for effective use.
  • Users find the complex setup of Singularity AI SIEM to be a significant hurdle during initial implementation.
  • Users are concerned about the high cost of Singularity AI SIEM, impacting its accessibility and overall value.
  • Users note the high cost and complex setup of Singularity AI SIEM, impacting user accessibility and experience.
  • Users note the limited features of Singularity AI SIEM, which may hinder its overall effectiveness compared to competitors.

What Are Recent G2 Reviews of Singularity AI SIEM?

Devo

Devo unlocks the full value of machine data for the world’s most instrumented enterprises by putting more data to work now. With Devo, IT executives finally realize the transformational promise of machine data to drive breakthrough projects that move the entire business forward. Born for today’s fully instrumented world, the Devo platform is purpose-built for both the sheer volume of data generated today, and the crushing demands of automation and the millions of algorithms that need to consume machine data. Our unique No-Compromise Architecture frees IT from the painful constraints of existing enterprise log management (ELM) systems, ingesting petabytes daily with blistering speed with no re-architecting required, even as data volumes explode. All machine data is unified, hot, and ready to use across multiple teams and use cases, from the moment of ingestion, for as long as you want to retain it – no limits. Only Devo combines real-time streams with historical data for fully contextual analytics, delivering 10x faster response times for tens of thousands of simultaneous queries. Devo powers the world’s most instrumented enterprises – Telefonica, Caixa Bank, Panda Security and 1000+ more worldwide – all realizing game-changing economics and compounding value from their machine data. Visit www.devo.com to learn more.

Average Rating: 4.3/5.0

Total Reviews: 5

How Do G2 Users Rate Devo?

  • Activity Monitoring: 3.3/10 (Category avg: 9.2/10)
  • Data Examination: 5.0/10 (Category avg: 8.7/10)
  • Ease of Use: 9.2/10 (Category avg: 8.8/10)
  • Log Management: 5.0/10 (Category avg: 9.2/10)

Who Is the Company Behind Devo?

  • Seller: Devo
  • Year Founded: 2011
  • HQ Location: Boston, Massachusetts, United States
  • LinkedIn® Page: www.linkedin.com
    498 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 40% Medium, 40% Small

What Are Recent G2 Reviews of Devo?

What Are G2 Users Discussing About Devo?

LogLogic SIEM

LogLogic SIEM, developed by LogLogic , is a comprehensive Security Information and Event Management solution designed to centralize and analyze IT data across an organization's infrastructure. It enables enterprises to collect, manage, and interpret log data from various sources, including network devices, servers, databases, and applications, facilitating enhanced security, compliance, and operational efficiency. Key Features and Functionality: - Universal Collection Framework : A WAN-aware, encrypted, and compressed data transport system that ensures resilient and efficient log data collection across distributed environments. - Log Labels: An enterprise-class data description technology that structures and organizes text-based data, allowing for intelligent parsing and management of logs from diverse applications and devices. - User-Centric Interface: A streamlined management interface designed to reduce remediation and discovery times, enhancing workflow efficiency. - Virtual Appliance Deployment: Offers a full-service virtual SIEM solution via VMware technology, providing flexibility and scalability for businesses with space-constrained or widely distributed IT environments. - Compliance Management: Includes a Compliance Suite with customizable reports and alerts mapped to major regulations such as PCI DSS, HIPAA, and SOX, aiding organizations in meeting compliance mandates. Primary Value and Problem Solved: LogLogic SIEM addresses the critical need for organizations to monitor, analyze, and respond to security events and compliance requirements effectively. By centralizing log data collection and analysis, it provides real-time insights into network security, user activities, and system performance. This comprehensive visibility enables rapid identification of compliance violations, policy breaches, cyberattacks, and insider threats, thereby enhancing an organization's security posture and operational efficiency.

Average Rating: 4.4/5.0

Total Reviews: 5

How Do G2 Users Rate LogLogic SIEM?

  • Activity Monitoring: 10.0/10 (Category avg: 9.2/10)
  • Data Examination: 8.3/10 (Category avg: 8.7/10)
  • Ease of Use: 7.5/10 (Category avg: 8.8/10)
  • Log Management: 9.2/10 (Category avg: 9.2/10)

Who Is the Company Behind LogLogic SIEM?

  • Seller: LogLogic
  • Year Founded: 1994
  • HQ Location: Horley, GB
  • LinkedIn® Page: www.linkedin.com
    1 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 60% Large, 20% Medium

What Are Recent G2 Reviews of LogLogic SIEM?

What Are G2 Users Discussing About LogLogic SIEM?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 31, 2024