--- title: LevelBlue USM Anywhere Reviews meta_title: 'LevelBlue USM Anywhere Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 114 reviews by the users' company size, role or industry to find out how LevelBlue USM Anywhere works for a business like yours. aggregate_rating: rating_value: 4.4 review_count: 114 scale: '5' date_modified: '2026-08-04' parent_category: name: System Security url: https://www.g2.com/categories/system-security --- # LevelBlue USM Anywhere Reviews **Vendor:** LevelBlue **Category:** [Security Information and Event Management (SIEM) Software](https://www.g2.com/categories/security-information-and-event-management-siem) **Average Rating:** 4.4/5.0 **Total Reviews:** 114 ## About LevelBlue USM Anywhere LevelBlue USM Anywhere is a cloud-based security management solution that accelerates and centralizes threat detection, incident response, and compliance management for your cloud, hybrid cloud, and on-premises environments. USM Anywhere includes purpose-built cloud sensors that natively monitor your Amazon Web Services (AWS) and Microsoft Azure cloud environments. On premises, lightweight virtual sensors run on Microsoft Hyper-V and VMware ESXi to monitor your virtual private cloud and physical IT infrastructure. With USM Anywhere, you can rapidly deploy sensors into your cloud and on-premises environments while centrally managing data collection, security analysis, and threat detection from the AlienVault Secure Cloud. Five Essential Security Capabilities in a Single SaaS Platform AlienVault USM Anywhere provides five essential security capabilities in a single SaaS solution, giving you everything you need for threat detection, incident response, and compliance management—all in a single pane of glass. With USM Anywhere, you can focus on finding and responding to threats, not managing software. An elastic, cloud-based security solution, USM Anywhere can readily scale to meet your threat detection needs as your hybrid cloud environment changes and grows. 1. Asset Discovery 2. Vulnerability Assessment 3. Intrusion Detection 4. Behavioral Monitoring 5. SIEM ## LevelBlue USM Anywhere Reviews ### 1. AlienVault USM Anywhere SEIM **Rating:** 5.0/5.0 stars **Reviewed by:** Brett C. | IT Supervisor, Utilities, Mid-Market (51-1000 emp.) **Reviewed Date:** May 12, 2017 **What do you like best about LevelBlue USM Anywhere?** The product is easy to use for small organizations that require network and security monitoring. It allows us to monitor systems that are located in geographically different areas than our business office. We can now monitor remote and mobile endpoints with ease. **What do you dislike about LevelBlue USM Anywhere?** There are times when it can be difficult to get a plugin to work with the USM software. This seems to be getting better as they courteously add and update features but it is still little troublesome at times. **Recommendations to others considering LevelBlue USM Anywhere:** Make sure your monitoring interfaces are located properly within your organization. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** AlienVault USM has helped with issues such as risk management. We are better able to identified potential risk associated with IT. The benefits we have received are such that we can now better to respond to risks that affect our business. With this being the USM Anywhere version, we are able to solve the problem of protecting remote and mobile endpoints from one plane of view with ease. **Official Response from Tami Andrews:** > Brett - thank you for providing your invaluable feedback! ### 2. If you want to catch all the bad stuff going on in your company's network, Alienvault is there. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Internet | Mid-Market (51-1000 emp.) **Reviewed Date:** November 02, 2018 **What do you like best about LevelBlue USM Anywhere?** It detects all the malicious activities really fast. Really efficient filters and you can even find out the names of the people doing/getting malicious stuff from the web. **What do you dislike about LevelBlue USM Anywhere?** It's just slow sometimes, gets stuck and some little complications from the backend. **Recommendations to others considering LevelBlue USM Anywhere:** Alienvault is one of the response tools available. It's fast, efficient, and helps you to secure your corporate network. Pretty easy to use. And really inexpensive. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Detecting everyday malicious activities going on in my company's network. For eg- Brute forcing, malware/trojan detection, Account lockouts etc. **Official Response from Tami Andrews:** > Thank you for taking time to provide your feedback! ### 3. Nice SIEM nut with a few cons **Rating:** 3.5/5.0 stars **Reviewed by:** Sergio S. | Analista de CiberSeguridad, Enterprise (> 1000 emp.) **Reviewed Date:** August 10, 2018 **What do you like best about LevelBlue USM Anywhere?** I like the policy rules because we can analyze all out traffic with it **What do you dislike about LevelBlue USM Anywhere?** i don't like have to reload all the filters whe I create a new tab **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** We aboard all the traffic and analyze the payloads **Official Response from Tami Andrews:** > Sergio - Thank you for taking time to provide your feedback! ### 4. Alienvault is a good choice as SIEM **Rating:** 5.0/5.0 stars **Reviewed by:** Marcela G. | Enterprise (> 1000 emp.) **Reviewed Date:** March 23, 2018 **What do you like best about LevelBlue USM Anywhere?** It is easy to understand and use, the training by the staff is excellent and fast since they have solved several doubts. . Alienvault is a product that works well for companies that do not have personal security insurance, which is quite easy to start up and manage. **What do you dislike about LevelBlue USM Anywhere?** I have nothing that I dislike about AlienVault **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** DS, vulnerability scanning, activity time monitoring, notification of when a server or device is disconnected, network mapping, network asset detection, malware monitoring, network traffic monitoring, record consolidation, activity alert suspicious etc. **Official Response from Tami Andrews:** > Marcela - Thank you for taking time to provide your feedback! ### 5. It Has Powerful Threat Detection, Incident Response, And Compliance Management **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Small-Business (50 or fewer emp.) **Reviewed Date:** May 01, 2018 **What do you like best about LevelBlue USM Anywhere?** AlienVault Unified Security Management (USM) has powerful threat detection, incident response, and compliance management. We can use this across cloud, on-premise and hybrid environments. The reason to use USM is that it has the following components in its package: Asset Discovery Vulnerability Assessment Intrusion Detection Behavioral Monitoring SIEM & Log Management. **What do you dislike about LevelBlue USM Anywhere?** AlienVault must improve their correlation feature. Some of the events do not match with the correlation rules and some of the correlation events are false-positive. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** AlienVault has an advanced component within one package. With this, we can cover more area with one solution. As a example, it has vulnerability assessment component built-in. From this, we can do the vulnerability assessment easily and we do not have to buy another solution for the vulnerability assessment. It is easy to use and we can take better advantage from an all-in-one solution like USM. **Official Response from Tami Andrews:** > Thank you for taking time to provide your feedback! ### 6. AlienVault after 1 year of usage **Rating:** 4.5/5.0 stars **Reviewed by:** Patrick N. | admin, Education Management, Mid-Market (51-1000 emp.) **Reviewed Date:** June 05, 2018 **What do you like best about LevelBlue USM Anywhere?** All logs in one place, simply dashboards and IDS to detect what we cannot see at firts. **What do you dislike about LevelBlue USM Anywhere?** Detection on systems - manual and automatic if you mix them you will end with two same systems. Plugins which sometimes do not recognize logs details. **Recommendations to others considering LevelBlue USM Anywhere:** Please write yourself all bullet point why you need SIEM solution and search until you find something what match most of them as otherwise you end up with costly system changes. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** It saved my daily time of systems logs check - 2h a day. **Official Response from Tami Andrews:** > Patrick - Thank you for taking time to provide your feedback! ### 7. AlienVault Locks it Down **Rating:** 4.5/5.0 stars **Reviewed by:** Kevin W. | Client Development Manager, Computer & Network Security, Mid-Market (51-1000 emp.) **Reviewed Date:** March 13, 2018 **What do you like best about LevelBlue USM Anywhere?** AlienVault provides a simple, customizable dashboard to easily see the most important things going on in your environment. It goes beyond traditional SIEM by providing things like File Integrity Monitoring, IDS and Asset Management. It also has very simple integration with common cloud services (USM Anywhere only). **What do you dislike about LevelBlue USM Anywhere?** From a volume perspective, if you have a ton of log data, it isn't the best tool for traditional SIEM activities. There is also no migration from USM Appliance to USM Anywhere. You basically have to start over if you move some things to the cloud and want to capture that information. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Besides being a SIEM platform, I consider AlienVault to be a security/threat management platform. It provides IDS, SIEM, and active threat monitoring. **Official Response from Tami Andrews:** > Kevin - Thank you for taking time to provide your feedback! ### 8. AlienVault USM Anywhere **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** March 27, 2018 **What do you like best about LevelBlue USM Anywhere?** AlienVault USM Anywhere is a great product. Its ability to post threat data to a cloud console is a huge improvement over the previous reporting functionality. **What do you dislike about LevelBlue USM Anywhere?** It can still be difficult to integrate with 3rd party products. Digesting logs from some devices still requires plugins to be build manually - but they have made great strides in including more plugins by default. DHCP-based networks are still quite challenging to deal with. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** It is a great tool for knowing what types of activities are happening on your network. It has enabled the mitigation of several benign but unwanted applications on the network. **Official Response from Tami Andrews:** > Thank you for taking time to provide your feedback! ### 9. Feature packed but unrefined **Rating:** 3.5/5.0 stars **Reviewed by:** Karl S. | SOC Engineer II, Telecommunications, Small-Business (50 or fewer emp.) **Reviewed Date:** March 27, 2018 **What do you like best about LevelBlue USM Anywhere?** AlienVault is made of well known open source tools which makes it highly customization. **What do you dislike about LevelBlue USM Anywhere?** The UI is a bit unrefined and the reporting is not the best to look at. The software can also be unreliable. **Recommendations to others considering LevelBlue USM Anywhere:** Be knowledgeable with linux and take their training course to become familiar with the product. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Security visibility and monitoring. **Official Response from Tami Andrews:** > Karl - I appreciate you taking time to provide your feedback. ### 10. It’s decent **Rating:** 2.5/5.0 stars **Reviewed by:** Verified User in Sporting Goods | Small-Business (50 or fewer emp.) **Reviewed Date:** October 15, 2018 **What do you like best about LevelBlue USM Anywhere?** I like the display, It is aesthetically pleasing **What do you dislike about LevelBlue USM Anywhere?** Too complicated. While the display is great, it is not as user friendly as it could be **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Solving possible hacker problems. **Official Response from Tami Andrews:** > Thank you for taking time to provide your feedback! ### 11. AlienVault USM Anywhere **Rating:** 5.0/5.0 stars **Reviewed by:** Rogelio c. | In.sistemas, Enterprise (> 1000 emp.) **Reviewed Date:** March 27, 2018 **What do you like best about LevelBlue USM Anywhere?** The best thing you can do is buy an AV device that has everything you need and that includes 24 gb ram 1 tb hard disk 16 n, so that is an option to buy and take advantage of the full potential of the team. **What do you dislike about LevelBlue USM Anywhere?** At the moment nothing, the truth is that the service provided is very incredible and has not had any kind of problem. **Recommendations to others considering LevelBlue USM Anywhere:** Yes **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Evaluate all the assets of your red ... before someone else does! (Active Scanning of Red - Passive Monitoring of Red - Inventory of Assets - Inventory of Software) **Official Response from Tami Andrews:** > Rogelio - I appreciate you providing feedback today! ### 12. No Fuss, No Muss, Does what it says on the Tin **Rating:** 4.5/5.0 stars **Reviewed by:** Paul R. | Security Engineer, Information Technology and Services, Mid-Market (51-1000 emp.) **Reviewed Date:** September 27, 2017 **What do you like best about LevelBlue USM Anywhere?** The solution "just works"... once you've got it set up. Support is usually great and the community surrounding the product is top notch. **What do you dislike about LevelBlue USM Anywhere?** KB Articles leave a bit to be desired and sometimes lack depth or go into too much detail where none is needed, a second pass through technical writers would be a good idea. **Recommendations to others considering LevelBlue USM Anywhere:** You owe it to yourself to at least eval the OSSIM product if you're shopping around, it should give you a good idea of the product without investment. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** SIEM first, ask questions later. The USM thrives as a SIEM and does this at a lower cost of entry than many competitors. Everything else can be hit or miss but it always works... just not necessarily the way you want or in a way that is immediately intuitive. **Official Response from Tami Andrews:** > Thank you Paul for your time & feedback! ### 13. Well Rounded Product **Rating:** 4.5/5.0 stars **Reviewed by:** Trevor S. | Information Systems Network Technician, Mid-Market (51-1000 emp.) **Reviewed Date:** May 16, 2017 **What do you like best about LevelBlue USM Anywhere?** This product was easy to get up and running, has a great support team behind it, and has a variety of great tools built into one package. **What do you dislike about LevelBlue USM Anywhere?** The main problem I have with the USM solution is the tendency for the information to easily overwhelm and thus be ignored. For instance, filtering out expected events tends to be more cumbersome than I would hope. **Recommendations to others considering LevelBlue USM Anywhere:** When selecting a USM solution make sure you speak with a representative about their free trial options. They have different products depending on organization size and their trails are fully functional. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Alienvault was purchased to meet our needs pertaining to PCI Compliance standards. We were able to use Alienvault to complete four different requirements for monitoring rather than using multiple programs. **Official Response from Tami Andrews:** > Trevor - thanks so much for your feedback! ### 14. Its the People that make a great product **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Management Consulting | Mid-Market (51-1000 emp.) **Reviewed Date:** September 26, 2017 **What do you like best about LevelBlue USM Anywhere?** Ease of use, clarity, the support and training - enthusiasm of the support and training teams - training is fantastic - we also had a day of consultancy and that was extremely insightful - the product brings a broad feature stack in one clean unified interface - its easy to install, and maintain - the OTX pulses are very helpful and provide a powerful platform for almost instant detection of emerging threats - worth subscribing to whilst you eval the product **What do you dislike about LevelBlue USM Anywhere?** Some aspects of the upgrade process - the fact that you backup, upgrade the system, but that backup is worthless as it can only be used on the previous build version, which would require a downgrade install and fresh build - fine in a VM world if you are using the virtualised version of the product and can take a snapshot, but could be improved upon. We run another backup post upgrade for completeness and compatibility. Some of the menus/features are over nested - not always clear where to find things. **Recommendations to others considering LevelBlue USM Anywhere:** Run an Eval, give yourself time - its a comprehensive product- make sure you understand the networking requirements - do the training - its great value and very well taught - understand the need for remote sensors - only log what you need to! **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** The primary purpose of AlienVault USM is to provide us with additional insight in to the unknown - what's happening on our network, and servers and to provide an SIEM platform to help reduce risk and improve management, bring insight in to our logs. **Official Response from Tami Andrews:** > Thank you for your comments & feedback! ### 15. AlienVault USM **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Enterprise (> 1000 emp.) **Reviewed Date:** February 23, 2018 **What do you like best about LevelBlue USM Anywhere?** Alarms for bad actors. Notifications to email on specific events. Reporting on custom events is nice for tracking usage. **What do you dislike about LevelBlue USM Anywhere?** Couple of dislikes... HIDS is very slow so if you're trying to audit Active directory logons for a specific user forget it. Plugins are just too hard to write if you aren't a programmer. Need a professional to do any real "tweaking" as support only does break fix. **Recommendations to others considering LevelBlue USM Anywhere:** Learn Regex/Python **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** SIEM window pane for threats and HIPAA compliance through audits and notifications. **Official Response from Tami Andrews:** > Thank you for taking time to provide your feedback! ### 16. Easy and Affordable! **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Staffing and Recruiting | Enterprise (> 1000 emp.) **Reviewed Date:** April 26, 2018 **What do you like best about LevelBlue USM Anywhere?** I love that it works with other system tools like Office365, McAfee and ServiceNow. Really streamlines everything into one process and makes it very user friendly. It is also HIPAA compliant. **What do you dislike about LevelBlue USM Anywhere?** Alarm dashboard is very busy, but it is broken up into 5 categories of risk which will show you can focus on the most important threats. **Recommendations to others considering LevelBlue USM Anywhere:** Do not be overwhelmed by the threat dashboard. Focus on the largest/most important threats. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Assessment of vulnerability, identifying suspicious behavior from users, fast detection of threats and fast response. **Official Response from Tami Andrews:** > Thank you for taking time to provide your feedback! ### 17. Flexibility and Intelligence **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Electrical/Electronic Manufacturing | Enterprise (> 1000 emp.) **Reviewed Date:** April 05, 2018 **What do you like best about LevelBlue USM Anywhere?** My organization is spread out across the globe, so the sensor deployment has greatly increased our ability to reach each site and gain the visibility we need. **What do you dislike about LevelBlue USM Anywhere?** Alienvault USM Anywhere has many updates, some of which will break suppression rules I write. This usually gets fixed in the next one or two updates, but can be frustrating. **Recommendations to others considering LevelBlue USM Anywhere:** If you want a product that is flexible to deploy, easy to use, and has a backing of community-created intelligence you will want this product. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Global deployment and gaining visibility into disparate sites to help create environmental standards. **Official Response from Tami Andrews:** > Thank you for taking time to provide your feedback! ### 18. Good for the price **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Research | Mid-Market (51-1000 emp.) **Reviewed Date:** June 06, 2018 **What do you like best about LevelBlue USM Anywhere?** The software is fairly easy to use and not clunky. **What do you dislike about LevelBlue USM Anywhere?** Limited bandwidth for traffic capture and space for logs **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Mitigating threats **Official Response from Tami Andrews:** > Thank you for taking time to provide your feedback! ### 19. Keeping an Eye of your Network **Rating:** 5.0/5.0 stars **Reviewed by:** Richard P. | Senior Security Engineer, Information Technology and Services, Small-Business (50 or fewer emp.) **Reviewed Date:** September 27, 2017 **What do you like best about LevelBlue USM Anywhere?** AlienVault's ability to monitor all HIDS and NIDS traffic and to correlate security events to warn you of breaches or malware is exceptional. They constantly update their intelligence and will provide a view of the network for the cyber security engineer that ordinarily he or she would not have. **What do you dislike about LevelBlue USM Anywhere?** I would recommend that the installation be done by a certified engineer. The setup is critical and not intuitive. **Recommendations to others considering LevelBlue USM Anywhere:** Powerful product. Setup is crucial and monitoring a must. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Firewalls, Endpoint protection, IDS, Sandboxing are all necessary components of network security. They usually do a great job in keeping malware and threats from penetrating their defenses. However, nothing is 100% effective. AlienVault makes sure that if anything does get through, AlienVault let's me know so I can handle the intrusion. Without it, I wouid be network blind. ### 20. AlienVault USM - technology of data distillation to information **Rating:** 4.5/5.0 stars **Reviewed by:** Karel . | Small-Business (50 or fewer emp.) **Reviewed Date:** September 27, 2017 **What do you like best about LevelBlue USM Anywhere?** One graphic enviroment can orchestrate six security tools. Every tool is so connected with everyone. Together they achieve higher values. Information context, graphical form and interactivity also give this community a tool of a special spirit. Good idea, good execution. **What do you dislike about LevelBlue USM Anywhere?** AlienVault USM use MySQL like main database engine. I would like to be able to connect to another database, for example some graph database (Neo4J) or object database (CEPH). **Recommendations to others considering LevelBlue USM Anywhere:** Please - try to create a better environment for parser creation and correlation. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** we provide more secure security for clients who are unattainable for better security. ### 21. More than just a SIEM **Rating:** 4.5/5.0 stars **Reviewed by:** Shaun S. | Manager IT Service Operations Vancouver, Computer Software, Mid-Market (51-1000 emp.) **Reviewed Date:** May 19, 2017 **What do you like best about LevelBlue USM Anywhere?** I like all the features in AlienVault. Vulnerability Scanning, SIEM, IDS, File Integrity Monitoring are all critical functions we use daily **What do you dislike about LevelBlue USM Anywhere?** It does take some configuration of plugins, but AV will create ones given log files. Additionally, the vulnerability scans can take some tweaking but they are always updated with new vulnerabilities. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** We started looking for a SIEM and found AlienVault did so much more. We were able to convert older systems and consolidate all our logging and alarms in one system. I appreciate all the functionality AV gathers into one windows pane. ### 22. Simple and understandable security interface **Rating:** 5.0/5.0 stars **Reviewed by:** James E. | IT Specialist, Farming, Mid-Market (51-1000 emp.) **Reviewed Date:** June 01, 2017 **What do you like best about LevelBlue USM Anywhere?** I do not have to 'dig' within multiple levels of information to see what is going on. I can view the current alarm notifications in 1 large readable format. If an event catches my attention I can then delve into the details from here. **What do you dislike about LevelBlue USM Anywhere?** The inability for assets that have been identified to be tracked by MAC address. After spending the time to identify all our assets in the network I have found that devices with DHCP address can be incorrectly identified. Example hostname frplabws02-pc is currently recognized as: frplabws02-pc (192.168.***.***) jack-win7.***.local,mikes-pc.***.local,frplabws02-pc.***.local But DHCP lease has identified the system as : lorettas-iphone.***.local **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** To monitor computer systems for vulnerabilities not previously identified. The system discovered an ongoing port scan against our servers that was not identified before. Our main server was getting hit with a port scan to RDP 3389 (default port). Once this was discovered I changed the default port, created firewall rule on the desktop and our cisco firewall to allow legitimate access. Once configured the random port scan stopped and our network seemed to be more responsive. **Official Response from Tami Andrews:** > thank you so much James for your comments & valuable feedback! ### 23. Alienvault USM **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** September 27, 2017 **What do you like best about LevelBlue USM Anywhere?** I love the ability to see anything and everything that is going on in my network. The dashboard and alarms page are the beginning and end of my days and it makes my daily life easier! **What do you dislike about LevelBlue USM Anywhere?** Without training, the product is quite usable, but even with some training, there is usually a need for additional training in order to fully utilize all of the capabilities. I wish it were easier to mark events as false-positives instead of having to create custom policies that can take a bit to configure properly. **Recommendations to others considering LevelBlue USM Anywhere:** Alienvault is the only SIEM that I've used, but I've worked with former federal agents and they swear by Alien Vault so you know it's good. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** We are concerned with HIPAA regulations and the built-in reporting is great. ### 24. Very Informative. **Rating:** 5.0/5.0 stars **Reviewed by:** Wassim S. | Mid-Market (51-1000 emp.) **Reviewed Date:** April 03, 2018 **What do you like best about LevelBlue USM Anywhere?** All of the integration parts of the Open Source products that work together seamlessly. **What do you dislike about LevelBlue USM Anywhere?** Sometimes the system gets overloaded and response time becomes an issue. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** IDS, Vulnerability Scanning, Sys Logging and Event Monitoring. **Official Response from Tami Andrews:** > Wassim - I appreciate you taking time to provide your feedback! ### 25. Great data aggregation and monitoring **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.) **Reviewed Date:** October 20, 2017 **What do you like best about LevelBlue USM Anywhere?** The more data you feed into AV, the better reporting and analytics you get out of it. Since AV can cross correlate different sources of data, it notifies our team much more quickly of any potential issues. **What do you dislike about LevelBlue USM Anywhere?** The amount of granularity can become overwhelming. However, it becomes much easier after a bit of time with the rules. **Recommendations to others considering LevelBlue USM Anywhere:** If you need data aggregation for your security events, this is the tool to use. On top of the standard SIEM features, AV's OTX community is great resource for security events that happen around the world. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Security monitoring and awareness. We now have a single pane of glass to all things related to security on the network. **Official Response from Tami Andrews:** > Thank you for taking time to provide your feedback! ### 26. Secure Compliance Solutions uses AlienVault to provide Managed Security Services **Rating:** 5.0/5.0 stars **Reviewed by:** Corey S. | CTO, Information Technology and Services, Small-Business (50 or fewer emp.) **Reviewed Date:** September 27, 2017 **What do you like best about LevelBlue USM Anywhere?** The Visibility it provides into the traffic traversing the network. From the moment it is set up and configured, it is providing value. **What do you dislike about LevelBlue USM Anywhere?** It can get be expensive to install. Also, the product requires a handsome supply of system resources. **Recommendations to others considering LevelBlue USM Anywhere:** Consider going with USM Anywhere if you plan on managing it internally. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Information security management and general piece of mind. The news is inundated with stories of system breaches. With AlienVault installed and configured, there is always a team of security researchers on your payroll. ### 27. Is the SIEM you want **Rating:** 4.0/5.0 stars **Reviewed by:** Javier R. | Network Security Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** May 12, 2017 **What do you like best about LevelBlue USM Anywhere?** Best of USM is that you have all tools in one place, vulnerability scanner, netflow, hids...the other thing is the easy way to implement this product you have a wizard in the beggining that help step by step using the best practice like scan your network to find assets and adding to the usm inventory, next initiate the logger from security devices or other programs like, switches, firewalls, AV, you can add a span port to help improve your security this help to see malwares, danger applications, or if you have compromised the netflow help to see if there is a stranger behavior in the network. The USM have a ticket system that help to follow the alarms **What do you dislike about LevelBlue USM Anywhere?** some times the system have database problem, like generating reports that have too much time like two months ago you cant get the information sometimes, the other thing is when you do a vulnerability scanner you cant do anything because all the performance are using for the task, the other think is the dificult to follow a behaviour that you want to investigate so you have to add the alarm id and find it manually **Recommendations to others considering LevelBlue USM Anywhere:** the best you can do is buy a AV Appliance have all that you need that include like 24 gb ram 1 tb of hdd 16 n so that is one option to buy. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** monitoring and saving time finding threats in the network. **Official Response from Tami Andrews:** > Javier - thank you for your comments! ### 28. It's a Swiss Army Knife of Functionality **Rating:** 5.0/5.0 stars **Reviewed by:** Eric S. | CSO & CPO, Computer Software, Mid-Market (51-1000 emp.) **Reviewed Date:** May 12, 2017 **What do you like best about LevelBlue USM Anywhere?** One pane of glass covers a lot of functionality. Alienvault provides an awful lot of coverage at a very reasonable price. And, over time the user interface has improved and the linkages between functionality has become better. We are looking forward to being a long term customer. **What do you dislike about LevelBlue USM Anywhere?** Updating could be better. Occassionally there is regression in small pieces of functionality during an update. Most updates are just fine; however, some of the updates have caused problems - especially with vulnerability scanning (slower scanning). This is usually resolved fairly quickly, but it would have been helpful for this to be better QA'd first. **Recommendations to others considering LevelBlue USM Anywhere:** If you need a lot of functionality in one solution - this is a great tool. It may not be 100% of the best point solution, but it will be 80-90% of the functionality and nearly 100% of what you would actually use anyway. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** SIEM, VulnManagement, HIDS, Asset Discovery - Basically, excellent coverage on required toolsets to manage an InfoSec Program. **Official Response from Tami Andrews:** > Eric - I appreciate your time & comments! ### 29. AV has changed our MSP business **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Internet | Small-Business (50 or fewer emp.) **Reviewed Date:** March 27, 2018 **What do you like best about LevelBlue USM Anywhere?** Easy to use interface and configuration is fairly simple with a little bit of training. **What do you dislike about LevelBlue USM Anywhere?** Would like to see a better MSP dashboard for our MSP customer. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Immediate threats ### 30. Making my job easier or harder depending on how you look at it. **Rating:** 5.0/5.0 stars **Reviewed by:** David C. | Systems Engineer , Financial Services, Mid-Market (51-1000 emp.) **Reviewed Date:** June 05, 2017 **What do you like best about LevelBlue USM Anywhere?** I like that it one dashboard I get a great overview of what my network is doing. **What do you dislike about LevelBlue USM Anywhere?** I dislike the agent deployment process and which it were more flexible. **Recommendations to others considering LevelBlue USM Anywhere:** Really do like the software as any company should they continue to improve their product. As I use the product more I begin to realize the cost savings we are actually accumulating such as with the new WannaCry. I hear company after company getting hit by this malware as we had already closed up the vulnerability of SMBv1 in our network due to it showing on my vuln list weeks prior. This alone has saved my company quite a bit of funds. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** We are utilizing this software to prevent and secure our network from malicious attacks and also providing a means to measure our compliance actively. **Official Response from Tami Andrews:** > David - thank you for your time & feedback! ### 31. Alienvault USM for Security professionals **Rating:** 4.5/5.0 stars **Reviewed by:** David I. | Senior Information Security Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** September 26, 2017 **What do you like best about LevelBlue USM Anywhere?** AlienVault is an all-in-one SIEM device for monitoring events on your network. Not only does it monitor everything on your network, but also comes with a built-in vulnerability scanner. **What do you dislike about LevelBlue USM Anywhere?** Some of the reporting capabilities are not quite as robust as I would like. **Recommendations to others considering LevelBlue USM Anywhere:** For the price that AlienVault is; it is hard to beat everything you get; Events plus a vulnerability scanner. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Solving the issue of having tons and tons of events scattered throughout the organization, but no way to have one place to find what all is happening. With Alienvault we have been able to see everything for the organization, in one nice dashboard. ### 32. Easy Install & plenty of support! **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Market Research | Mid-Market (51-1000 emp.) **Reviewed Date:** March 01, 2018 **What do you like best about LevelBlue USM Anywhere?** The install process was painless, and I have "No" cloud infrastructure experience Any part I was unclear about, support helped fix the issue. **What do you dislike about LevelBlue USM Anywhere?** Information over-kill for the none experienced.... You will forced to learn more about cloud security.... Not really a dis-like...more like unprepared... **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Security, support, and education.... It USM found hole's in my network & helped me reconfigure more efficiently... **Official Response from Tami Andrews:** > Thank you for taking time to provide your feedback! ### 33. AlienVault USM Anywhere **Rating:** 4.5/5.0 stars **Reviewed by:** Stephen K. | Network Engineer, Consumer Goods, Mid-Market (51-1000 emp.) **Reviewed Date:** September 29, 2017 **What do you like best about LevelBlue USM Anywhere?** The Ease of implementation is nice. It is very easy to get up and running in a environment. **What do you dislike about LevelBlue USM Anywhere?** It could use some better customization. It can be difficult to filter out all the noise of the alerts. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** We are solving reporting and remediation required for PCI compliance. It is also to Identify Potential security breaches to our infrastructure. **Official Response from Tami Andrews:** > Stephen - I appreciate you taking time to provide your feedback. ### 34. AlienVault USM **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** October 07, 2017 **What do you like best about LevelBlue USM Anywhere?** Alien Vault USM provides an all in one solution to compliance and network monitoring. With advanced intrusion detection and logging. **What do you dislike about LevelBlue USM Anywhere?** I have nothing to dislike about AlienVault **Recommendations to others considering LevelBlue USM Anywhere:** Easy to use and deploy Nice GUI easy to setup users and user levels **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Unified Security Management (USM) Delivers Advanced Security in the Cloud & On-Premises Asset Discovery / Asset Management Vulnerability Assessment / Network Vulnerability Scanning Vulnerability Management Intrusion Detection Network IDS Host Based IDS File Integrity Monitoring SIEM / Event Correlation SIEM Event Correlation Threat Detection Insider Threats Advanced Persistent Threats Ransomware **Official Response from Tami Andrews:** > Thank you for taking time to provide your feedback & comments! ### 35. Great Product, very flexible but difficult to get started **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Investment Management | Mid-Market (51-1000 emp.) **Reviewed Date:** June 08, 2017 **What do you like best about LevelBlue USM Anywhere?** The product is amazing in terms of what it can do, it is very flexible and powerful. Lots of features relating to alerts on potential threats. In addition the ability to package a SIEM into the same product is great. **What do you dislike about LevelBlue USM Anywhere?** It is complicated to get started. It takes a big learning curve to get up and running. The online training is basic at best and their online courses are "In Person" so you have to sit through an entire session at one time. I don't have 5 full days to take a training class (EVER). **Recommendations to others considering LevelBlue USM Anywhere:** Make sure you have the bandwidth to dedicate for setup and training. This is not a product that is set and forget. You must install and customize it to your environment before it will be useful. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** I was looking for a vulnerability scanner to solve a business requirement of being able to scan my entire network and prioritize vulnerabilities. **Official Response from Tami Andrews:** > Thank you for taking time to provide your comments & feedback! ### 36. AlienVault in library **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Civic & Social Organization | Mid-Market (51-1000 emp.) **Reviewed Date:** March 15, 2018 **What do you like best about LevelBlue USM Anywhere?** It provide concentrated logs for aws and onsite devices. **What do you dislike about LevelBlue USM Anywhere?** Have to get used to search properly logs to get what you need. **Recommendations to others considering LevelBlue USM Anywhere:** DO all POC and choose the best which fits your requirements in that time. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Logging system and IDS inspection on servers in AWS. **Official Response from Tami Andrews:** > Thank you for taking time to provide your feedback! ### 37. Alienvault Good Choice For All Around SIEM **Rating:** 5.0/5.0 stars **Reviewed by:** Ruben H. | IT Security Analyst, Internet, Mid-Market (51-1000 emp.) **Reviewed Date:** May 12, 2017 **What do you like best about LevelBlue USM Anywhere?** Integration of security tools in one platform, I think is a differential on the market with the others SIEM's, the ease of modify and create my own plugins although is need have a deep linux knowledge. I think the reports is very good, the solution have the templates to get information and take decisions to improve the security controls. **What do you dislike about LevelBlue USM Anywhere?** It's not just AV, I think all platforms in the market needs to improve the GUI to have a better manage and I think the preformance in the appliances need improve and last, more documentation or improve the KB to have a better knowledge to do troubleshooting. **Recommendations to others considering LevelBlue USM Anywhere:** Deployment, integration and scalability **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** It is perfect to have the best visibility of the behavior of the network with reports and to give evidence to the compliances such as ISO 27001, also is great tool to begin to established indicators to the SOC with the data recollected **Official Response from Tami Andrews:** > Ruben - thank you for your time & candid comments! ### 38. Stability of the platform **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Banking | Mid-Market (51-1000 emp.) **Reviewed Date:** May 17, 2017 **What do you like best about LevelBlue USM Anywhere?** The platform is stable in a virgin installation, has good speed, has ease of use, has good whiteboards for summary of statistics, integrates in a good way to several IDS and IPS, has a very good amount of pluing, has its free version that Is OSSIM, it is easy to install and configure, Has a friendly interface, has very good details about the events, the design is sober is professional, Everything can be handled from a click from the web interface or from the CLI that provides this gives a very large ease and maneuverability **What do you dislike about LevelBlue USM Anywhere?** The installation after its constant patching becomes unstable, the database is saturated to such a level that it comes to think that it does not have a good architecture or index relation, has very poor description of logs makes you investigate out of the tool each Code detected to make your diagnosis, has a poor information of the activity of the users, the support in the version USM they serve but they do not solve **Recommendations to others considering LevelBlue USM Anywhere:** Improve the support, in the aspect that reaches a point where nobody can fix the problem and you stay with the platform unstable and with bad modules, and support in other languages **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Helped me to keep track of network traffic and traffic analysis good traffic bad and possible amanezas the analysis panel is very friendly and easy to use when you take the practice, its management in correlations creates ideas that serve you to power Seek and deepen some vulnerability ### 39. Alienvault Good Choice For All Around SIEM **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.) **Reviewed Date:** May 12, 2017 **What do you like best about LevelBlue USM Anywhere?** Alienvault was straightforward to set up and start using. Training was good and allowed us to immediately customize the product to our needs. Support has been good when needed. This product gives us much more insight as to what is happening on our network than we had previously. The included scanner is good and allowed us to cancel our subscription with another vendor for the service. Alienvault is a product that works well for businesses that do not have a dedicated security staff since it is pretty straightforward to get up and running and to manage. Asset discovery is fair, OS is typically incorrectly identified though. Support is typically pretty good, fairly quick to respond and provide a solution to the reported issue. **What do you dislike about LevelBlue USM Anywhere?** Data organization could be better. Need to be able to sort scan results on the vulnerability for example. I currently rely on a system built in-house that I then export scan data from Alienvault and input into this system in order to then view in a more readable format. Vulnerabilities within USM itself have been identified but not yet corrected. For being a security product, you expect this to be addressed quickly. **Recommendations to others considering LevelBlue USM Anywhere:** Take the training when you can dedicate your full attention to it. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Enable/improve behavioral analysis of users and other entities Enable/improve log collection, reporting and retention capabilities Enable/improve security event alerting, investigation Enable/improve security incident workflow and reporting Meet regulatory or commercial compliance requirements ### 40. Industry Tools from the College Classroom to the Field **Rating:** 4.5/5.0 stars **Reviewed by:** Philip G. | Professor, Mid-Market (51-1000 emp.) **Reviewed Date:** May 12, 2017 **What do you like best about LevelBlue USM Anywhere?** The executive dashboards give an immediate presence when displayed in the classroom environment on a big screen television as a dashboard. Students become inquisitive to learn what a product like USM or SIEM is, as buzz words become alive to touch an actual product. It is one thing to read about a Unified Security Manager (USM), or a Security Incident Event Manager (SIEM), but to actually visually see in a production environment and use it is another story. **What do you dislike about LevelBlue USM Anywhere?** There is a huge learning curve to understand the product. False positives provide a means for the students to do adequate research on a particular event and determine if what actually happened in the environment did indeed happen. **Recommendations to others considering LevelBlue USM Anywhere:** Have a dedicated person understand the product and give them the time to use it. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Many of our students are using AV in their required internship jobs as the companies they go to work for in the field are using the product. This is a great way for students to learn the product in a production lab environment without fear of breaking something. **Official Response from Tami Andrews:** > Thank you Philip for your comments! ### 41. AlienVault USM AIO **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Higher Education | Mid-Market (51-1000 emp.) **Reviewed Date:** May 12, 2017 **What do you like best about LevelBlue USM Anywhere?** The fact that it incorporates many different utilities into one product. **What do you dislike about LevelBlue USM Anywhere?** It is slightly difficult to navigate until you figure out where everything is located in the menus. You have to use it a good bit to get used to where things are. **Recommendations to others considering LevelBlue USM Anywhere:** Get on a Webinar with Alien Vault and let them live demo it for you. Also, sign up for the many videos and webinars they offer on how to do certain things you are interested in doing. Download the free trial a play with it in your environment. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** IDS, vulnerability scanning, uptime monitoring, notification of when a server or device goes offline, network mapping, asset discover on the network, malware monitoring, network traffic monitoring, log consolidation, suspicious activity alerting, OTX, notification of threat risk around the world to watch out for, and many more things too numerous to list here. ### 42. Newbie that's very impressed so far **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Mechanical or Industrial Engineering | Mid-Market (51-1000 emp.) **Reviewed Date:** October 02, 2017 **What do you like best about LevelBlue USM Anywhere?** I like the ease of deployment and the fact that everything is managed from a single pane **What do you dislike about LevelBlue USM Anywhere?** Nothing comes to mind so far as it's living up to it's hype **Recommendations to others considering LevelBlue USM Anywhere:** Give the trial a shot - you won't be disappointed **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Our company has now a real-time view of threats and can act upon these if/when they happen. Previously we may never have noticed or found out that we were being targeted **Official Response from Tami Andrews:** > Thank you for taking time to provide your feedback! ### 43. Best budget friendly commercial SIEM and all-in-one tool available **Rating:** 4.0/5.0 stars **Reviewed by:** Aaron B. | Director Security Operations, Higher Education, Mid-Market (51-1000 emp.) **Reviewed Date:** May 12, 2017 **What do you like best about LevelBlue USM Anywhere?** The best part of this product is that even right out of the box, you get instant utility. With the NIDS feature, you get instant alerting and security insight. Adding syslog, vulnerability scans and asset tracking is icing on the cake. **What do you dislike about LevelBlue USM Anywhere?** Coming from an open source background, the reporting and UI have that homegrown feel. Not the most intuitive or professional, but functional. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** This helps cover so many areas...compliance, security operations, vulnerability management. Biggest benefit is the IDS functionality and syslog correlation. This helps us with visibility and incident response. We can easily respond to the results of the correlation and alerting. ### 44. Can't Do Any Better for the Cost **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** September 26, 2017 **What do you like best about LevelBlue USM Anywhere?** AlienVault is a full featured cost effective SIEM that provides quality threat intelligence for a lot less than the competition. **What do you dislike about LevelBlue USM Anywhere?** The learning curve compared to some of the competition and the lack of native user behavior analytics. **Recommendations to others considering LevelBlue USM Anywhere:** Like anything, run it through it's paces to make sure that it meets your business requirements. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** It's a SIEM... It provides real-time analysis of security alerts generated by network hardware and applications. ### 45. Alien adult made us safer than ever **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.) **Reviewed Date:** January 04, 2018 **What do you like best about LevelBlue USM Anywhere?** Easy to setup and intuitive right out of the box. It’s not just a tagline **What do you dislike about LevelBlue USM Anywhere?** I’ve set this up a few times and I don’t have any major complaints with the software. However, I feel the training price could be a little more reasonable **Recommendations to others considering LevelBlue USM Anywhere:** Just try it, you’ll like it **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Internal penetration testing and vulnerability scanning **Official Response from Tami Andrews:** > Thank you for taking time to provide your feedback! ### 46. AlienVault USM is the guard dog you need **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Education Management | Mid-Market (51-1000 emp.) **Reviewed Date:** June 09, 2017 **What do you like best about LevelBlue USM Anywhere?** The quick out of the box setup. The easy to figure out settings because their documentation is not very good. The customization ability for plugins, rules and alerts. The integration with OTX makes it feel being part of a world wide Infosec Operation. **What do you dislike about LevelBlue USM Anywhere?** Documentation and training are not good. The product itself is pretty solid and has never given me issues and i've implemented it at 2 different companies. Their support is very solid and responsive. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** It has given both companies i have implemented this at the ability to get into the SEIM space at a nice price. My teams have been small so being able to implement, tune and train has been very important. ### 47. AlienVault USM Single Pain of Glass **Rating:** 5.0/5.0 stars **Reviewed by:** Kevin M. | IT Security Engineer, Retail, Enterprise (> 1000 emp.) **Reviewed Date:** June 08, 2017 **What do you like best about LevelBlue USM Anywhere?** All the monitoring is right at your finger tips. Easy to navigate with plenty of features to do the job, **What do you dislike about LevelBlue USM Anywhere?** It does take a little while to learn where all the features are located. The appliance does so much right out of the box, maybe there could be different user levels. **Recommendations to others considering LevelBlue USM Anywhere:** Defiantly is worth the investment, you won't be sorry. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Keeping our environment safe. Definitely helps with alerting the threats. Great device for log collection and reporting. ### 48. Simple and Powerful **Rating:** 4.5/5.0 stars **Reviewed by:** Kevin C. | Director of Technology Innovation UK, Outsourcing/Offshoring, Enterprise (> 1000 emp.) **Reviewed Date:** September 07, 2017 **What do you like best about LevelBlue USM Anywhere?** Interface and ease of use. I like the dashboard views **What do you dislike about LevelBlue USM Anywhere?** Maybe not simple enough - the back end set up can be bewildering! **Recommendations to others considering LevelBlue USM Anywhere:** Best for money **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** PCI Compliance ### 49. Network Administrator **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Insurance | Mid-Market (51-1000 emp.) **Reviewed Date:** September 08, 2017 **What do you like best about LevelBlue USM Anywhere?** Great value for the price - given you get a SIEM, log management, asset discovery, vulnerability management, Intrusion Detection and behavioral monitoring. **What do you dislike about LevelBlue USM Anywhere?** Like any SIEM it requires care and feeding **Recommendations to others considering LevelBlue USM Anywhere:** Great product and value. Company is growing and very responsive. **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** Better insight into our security posture with log correlation, vulnerability assessments and network IDS. Ability to be notified of and prevent threats. ### 50. Great product with an awesome support staff behind it. **Rating:** 5.0/5.0 stars **Reviewed by:** Dan D. | Information Technology Security Administrator, Mental Health Care, Enterprise (> 1000 emp.) **Reviewed Date:** June 05, 2017 **What do you like best about LevelBlue USM Anywhere?** Very easy to setup and monitor new assets, Like the ability to setup policy t be alerted on. scheduling auto scans to meet compliance needs. It very easy to train staff to use and working with AlienVault. **What do you dislike about LevelBlue USM Anywhere?** I dislike not having this AlienVault soon. **Recommendations to others considering LevelBlue USM Anywhere:** Great product with excellent support **What problems is LevelBlue USM Anywhere solving and how is that benefiting you?** This solves compliance requirements such as pci, hipaa and Judicial court systems compliance ## LevelBlue USM Anywhere Discussions - [How is AlienVault, Splunk and Vijilan compared in terms of pricing?](https://www.g2.com/discussions/33327-how-is-alienvault-splunk-and-vijilan-compared-in-terms-of-pricing) - 1 comment, 1 upvote - [View LevelBlue USM Anywhere pricing details and edition comparison](https://www.g2.com/products/levelblue-usm-anywhere/reviews?page=2§ion=pricing&secure%5Bexpires_at%5D=2026-08-05+05%3A50%3A45+-0500&secure%5Bsession_id%5D=9186300d-18a9-4333-a3c8-538b900a9fb9&secure%5Btoken%5D=0d3af716a71d6a7afed8bdf1b7c5d8cf25d12e22d4652a92f460fb63bd20c44f&format=llm_user) ## LevelBlue USM Anywhere Features **Prevention** - Intrusion Prevention - Firewall - Encryption - Security hardening - Cloud Data Protection **Security** - Compliance Monitoring - Anomoly Detection - Data Loss Prevention - Cloud Gap Analytics **Performance** - Issue Tracking - Detection Rate - False Positives - Automated Scans **Response** - Resolution Automation - Resolution Guidance - System Isolation - Threat Intelligence - Incident Investigation **Cloud Visibility** - Data Discovery - Cloud Registry - Cloud Gap Analytics **Network Management** - Activity Monitoring - Asset Management - Log Management **Detection** - Intrusion Detection - Security Monitoring - Anti-Malware / Malware Detection **Compliance** - Governance - Data Governance - Sensitive Data Compliance **Network** - Compliance Testing - Perimeter Scanning - Configuration Monitoring **Records** - Incident Logs - Incident Reports **Security** - Data Security - Data loss Prevention - Security Auditing **Incident Management** - Event Management - Automated Response - Incident Reporting **Administration** - Compliance - Administration Console - - API / integrations **Administration** - Policy Enforcement - Auditing - Workflow Management **Application** - Manual Application Testing **Management** - Incident Alerts - Incident Case Management - Workflow Management **Identity** - SSO - Governance - User Analytics **Security Intelligence** - Threat Intelligence - Vulnerability Assessment - Advanced Analytics - Data Examination **Generative AI** - AI Text Summarization **Agentic AI - Security Information and Event Management (SIEM)** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making **Agentic AI - Vulnerability Scanner** - Autonomous Task Execution - Proactive Assistance **Generative AI** - AI Text Generation - AI Text Summarization **Agentic AI - Intrusion Detection and Prevention Systems (IDPS)** - Autonomous Task Execution - Proactive Assistance ## Top LevelBlue USM Anywhere Alternatives - [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) - 4.4/5.0 (283 reviews) - [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) - 4.4/5.0 (273 reviews) - [Splunk Enterprise Security](https://www.g2.com/products/splunk-enterprise-security/reviews) - 4.3/5.0 (223 reviews)