# Best User and Entity Behavior Analytics (UEBA) Software ## How Many User and Entity Behavior Analytics (UEBA) Software Products Does G2 Track? **Total Products under this Category:** 60 ### Category Stats (Jul 2026) - **Average Rating:** 4.32/5 The average rating of products in this category, based on all submitted ratings - **Top Trending Product:** Thales CipherTrust Data Security Platform (+2.63%) - Among all products in this category, Thales CipherTrust Data Security Platform recorded the largest rating increase compared to last month _Last updated: July 31, 2026_ ## How Does G2 Rank User and Entity Behavior Analytics (UEBA) Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 2,700+ Authentic Reviews - 60+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## G2 Grid® for User and Entity Behavior Analytics (UEBA) Software ![G2 Grid® for User and Entity Behavior Analytics (UEBA) Software plotting products by satisfaction and market presence](https://www.g2.com/categories/user-and-entity-behavior-analytics-ueba/grids.png?focus%5B%5D=68606&focus%5B%5D=108767&focus%5B%5D=21187&focus%5B%5D=5691&focus%5B%5D=70840&focus%5B%5D=99330&focus%5B%5D=1430041&focus%5B%5D=27399) Highlighted products: CrowdStrike Falcon Endpoint Protection Platform, Varonis Data Security Platform, Teramind, ManageEngine ADAudit Plus, Cynet, Safetica, Palo Alto Cortex XSIAM, and IBM QRadar SIEM. Underlying data: [Grid® JSON](https://www.g2.com/categories/user-and-entity-behavior-analytics-ueba/grids.json?focus%5B%5D=crowdstrike-falcon-endpoint-protection-platform&focus%5B%5D=varonis-data-security-platform&focus%5B%5D=teramind&focus%5B%5D=manageengine-adaudit-plus&focus%5B%5D=cynet&focus%5B%5D=safetica&focus%5B%5D=palo-alto-cortex-xsiam&focus%5B%5D=ibm-ibm-qradar-siem) **Sponsored** ### Datadog Datadog is the monitoring, security and analytics platform for developers, IT operations teams, security engineers and business users in the cloud age. The SaaS platform integrates and automates infrastructure monitoring, application performance monitoring and log management to provide unified, real-time observability of our customers' entire technology stack. Datadog is used by organizations of all sizes and across a wide range of industries to enable digital transformation and cloud migration, drive collaboration among development, operations, security and business teams, accelerate time to market for applications, reduce time to problem resolution, secure applications and infrastructure, understand user behavior and track key business metrics. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=2179&secure%5Bchosen_at%5D=2026-07-31T17%3A52%3A37Z&secure%5Bdisplayable_resource_id%5D=1081&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=neighbor_category&secure%5Bplacement_resource_ids%5D%5B%5D=1081&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=3824&secure%5Bresource_id%5D=2179&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fuser-and-entity-behavior-analytics-ueba%3Fopen_modal_url%3D%252Fproducts%252Fnetwrix-threat-manager%252Fwishlists%253Fhost_path%253D%25252Fcategories%25252Fuser-and-entity-behavior-analytics-ueba%2526source%253Dcategory&secure%5Btoken%5D=f087f6bb9219a5d3121881927179f8d1e5ff18fd21a3dfa056e8d4b0977c30e0&secure%5Burl%5D=https%3A%2F%2Fwww.datadoghq.com%2Fdg%2Fmonitor%2Ffree-trial-g2%2F%3Futm_source%3Dg2crowd%26utm_medium%3Dreview-site%26utm_campaign%3Ddg-coreplatform-multi-ww-en-g2&secure%5Burl_type%5D=custom_url) ### [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) Organizations today face a serious challenge: managing numerous security vendors and tools while confronting an ever-evolving threat landscape. Sophisticated adversaries are becoming smarter, faster, and more evasive, launching complex attacks that can strike in minutes or even seconds. Traditional security approaches struggle to keep pace, leaving businesses vulnerable. The CrowdStrike Falcon Platform addresses this by offering a unified, cloud-native solution. It consolidates previously siloed security solutions and incorporates third-party data into a single platform with one efficient and resource-conscious agent, leveraging advanced AI and real-time threat intelligence. This approach simplifies security operations, speeds analyst decision making, and enhances protection to stop the breach, allowing organizations to reduce risk with less complexity and lower costs. CrowdStrike's Falcon Platform includes: - Endpoint Security: Secure the endpoint, stop the breach - Identify Protection: Identity is the front line, defend it - Next-Gen SIEM: The future of SIEM, today - Data Protection: Real-time data protection from endpoint to cloud - Exposure Management: Understand risk to stop breaches - Charlotte AI: Powering the next evolution of the SOC **Average Rating:** 4.6/5.0 **Total Reviews:** 415 #### How Do G2 Users Rate CrowdStrike Falcon Endpoint Protection Platform? - **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.0/10) - **Ease of Use:** 9.0/10 (Category avg: 8.7/10) - **Continuous Analysis:** 9.2/10 (Category avg: 8.9/10) - **Anomaly Detection:** 9.0/10 (Category avg: 8.9/10) #### Who Is the Company Behind CrowdStrike Falcon Endpoint Protection Platform? - **Seller:** [CrowdStrike](https://www.g2.com/sellers/crowdstrike) - **Company Website:** www.crowdstrike.com - **Year Founded:** 2011 - **HQ Location:** Sunnyvale, CA - **Twitter:** @CrowdStrike 110,809 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=f13dce0bc1628ccb762ed9d5acb4e0f0998a717639b903c3d3a271ef1da6ad7b&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F2497653%2F&secure%5Burl_type%5D=linkedin_company_website) 11,343 employees on LinkedIn® #### Who Uses This Product? - **Who Uses This:** Security Analyst, Cyber Security Analyst - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 43% Large, 42% Medium #### What Do G2 Reviewers Say About CrowdStrike Falcon Endpoint Protection Platform? _AI-generated summary from verified user reviews_ ##### Pros - Users appreciate the **lightweight performance and powerful threat detection** of CrowdStrike Falcon, enhancing operational efficiency and security. - Users value the **effective threat detection** of CrowdStrike Falcon, ensuring robust security without compromising system performance. - Users appreciate the **ease of use** of CrowdStrike Falcon, benefiting from a lightweight and efficient security solution. - Users appreciate the **advanced real-time threat protection** of CrowdStrike Falcon, enhancing security with minimal system impact. - Users appreciate the **strong threat detection** of CrowdStrike Falcon, effectively catching both known and unknown threats seamlessly. ##### Cons - Users find the **cost of CrowdStrike Falcon** to be high, especially for smaller teams needing advanced features. - Users face **initial complexity and a steep learning curve** with CrowdStrike Falcon, making it challenging for non-technical personnel. - Users find the **initial learning curve** of CrowdStrike challenging, especially transitioning from other systems like Splunk. - Users find the **high cost and limited features** frustrating, particularly for smaller teams needing advanced capabilities. - Users express concern over **pricing issues** , especially for smaller organizations needing advanced features with additional licensing costs. #### What Are Recent G2 Reviews of CrowdStrike Falcon Endpoint Protection Platform? **["Crowdstrike Falcon: Proactive Security, Steep Learning Curve"](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12958852)** **Rating:** 5.0/5.0 stars _— Ansh B._ [Read full review](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12958852) **["Lightweight Deployment, Powerful Incident Response Visibility"](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12952621)** **Rating:** 5.0/5.0 stars _— Anup A._ [Read full review](https://www.g2.com/survey_responses/crowdstrike-falcon-endpoint-protection-platform-review-12952621) #### What Are G2 Users Discussing About CrowdStrike Falcon Endpoint Protection Platform? - [How does Falcon prevent work?](https://www.g2.com/discussions/how-does-falcon-prevent-work) - 1 comment - [Does CrowdStrike offer MFA?](https://www.g2.com/discussions/does-crowdstrike-offer-mfa) - 1 comment - [What is OverWatch in CrowdStrike?](https://www.g2.com/discussions/what-is-overwatch-in-crowdstrike) - 1 comment - [How much does CrowdStrike Falcon X cost?](https://www.g2.com/discussions/how-much-does-crowdstrike-falcon-x-cost) - [What is MDR detection?](https://www.g2.com/discussions/what-is-mdr-detection) ### [Varonis Data Security Platform](https://www.g2.com/products/varonis-data-security-platform/reviews) Varonis is a leading data and AI security platform that helps enterprise organizations safely connect AI to sensitive data without compromising security and trust. By putting data at the center of security, Varonis delivers automated visibility, continuous risk reduction, and human and non-human identity threat detection across SaaS, multi-cloud, and on-prem environments. With rapid deployment, autonomous remediation, and 24x7 MDDR, Varonis helps security teams significantly reduce risk and safely scale AI with confidence. **Average Rating:** 4.6/5.0 **Total Reviews:** 88 #### How Do G2 Users Rate Varonis Data Security Platform? - **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.0/10) - **Ease of Use:** 8.1/10 (Category avg: 8.7/10) - **Continuous Analysis:** 9.3/10 (Category avg: 8.9/10) - **Anomaly Detection:** 10.0/10 (Category avg: 8.9/10) #### Who Is the Company Behind Varonis Data Security Platform? - **Seller:** [Varonis](https://www.g2.com/sellers/varonis) - **Company Website:** www.varonis.com - **Year Founded:** 2005 - **HQ Location:** New York, US - **Twitter:** @varonis 6,400 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=169bb1fa79f60501fda9bd04d2e9d377f6defb89386efeecfb4ff24bb30caab0&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fvaronis&secure%5Burl_type%5D=linkedin_company_website) 2,798 employees on LinkedIn® #### Who Uses This Product? - **Top Industries:** Financial Services, Manufacturing - **Company Size:** 64% Large, 32% Medium #### What Do G2 Reviewers Say About Varonis Data Security Platform? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **complete visibility into sensitive data** , enhancing proactive alerts and improving overall cybersecurity. - Users value the **robust data protection** and clear visibility into sensitive data that Varonis provides. - Users value the **complete visibility into sensitive data** , enabling proactive alerts and enhanced overall cybersecurity. - Users appreciate the **complete visibility and robust data protection** offered by Varonis, enhancing cybersecurity and compliance. - Users find the **user-friendly management features** of Varonis Data Security Platform enhance their overall cybersecurity experience. ##### Cons - Users note the **complexity of implementation** in Varonis, which may overwhelm teams lacking dedicated IT resources. - Users find the **learning curve steep** , making initial setup and feature mastery a challenging experience. - Users find the **learning difficulty** of Varonis challenging, as it requires time to understand its many features. - Users note the **high cost** of Varonis Data Security Platform can be prohibitive for smaller organizations. - Users find the **initial setup complex** , often requiring significant time and resources to fully implement Varonis. #### What Are Recent G2 Reviews of Varonis Data Security Platform? **["The best experience with Varonis Data Security Platform"](https://www.g2.com/survey_responses/varonis-data-security-platform-review-8137807)** **Rating:** 5.0/5.0 stars _— Jean-Baptiste F._ [Read full review](https://www.g2.com/survey_responses/varonis-data-security-platform-review-8137807) **["Varonis Saves Months of Compliance Work with Powerful Keyword Search and Helpful Support"](https://www.g2.com/survey_responses/varonis-data-security-platform-review-12798879)** **Rating:** 4.5/5.0 stars _— Douglas W._ [Read full review](https://www.g2.com/survey_responses/varonis-data-security-platform-review-12798879) #### What Are G2 Users Discussing About Varonis Data Security Platform? - [Is Varonis a reliable source?](https://www.g2.com/discussions/is-varonis-a-reliable-source) - [Does Varonis use agents?](https://www.g2.com/discussions/does-varonis-use-agents) - [What does Varonis DatAdvantage do?](https://www.g2.com/discussions/what-does-varonis-datadvantage-do) ### [Teramind](https://www.g2.com/products/teramind/reviews) Teramind is a unified workforce intelligence and cybersecurity platform designed to help organizations gain comprehensive visibility into employee activity, data movement, and insider risk across various environments, including endpoints, cloud applications, and networks. This platform integrates user activity monitoring, data loss prevention, and behavioral analytics to assist security teams in detecting insider threats, preventing data breaches, and investigating security incidents, all while supporting productivity optimization, AI governance, and compliance requirements. The platform is particularly beneficial for organizations that require a robust solution for monitoring and managing employee behavior and data security. It serves a diverse range of industries, including financial services, healthcare, government, manufacturing, and technology, where safeguarding sensitive information and mitigating insider risks are paramount. Teramind addresses various use cases, such as preventing intellectual property theft by departing employees, detecting compromised credentials, monitoring privileged user access, and enforcing acceptable use policies. Additionally, it aids organizations in demonstrating compliance with regulations like GDPR, HIPAA, and PCI-DSS. Teramind offers real-time data capture and alerting capabilities across desktop applications, web browsers, LLMs, AI Agents, email, file transfers, and cloud services. Security teams can leverage the platform to identify anomalous user behavior, enforce data protection policies, and respond to potential insider threats proactively. The software captures detailed audit trails, which include session recordings, screenshots, keystroke logging, application usage, and network activity, providing essential forensic evidence for security investigations and compliance audits. The architecture of Teramind supports various deployment options, including cloud-based SaaS, on-premises installations, and hybrid configurations, allowing organizations to choose a setup that best fits their operational needs. The platform seamlessly integrates with Security Information and Event Management (SIEM) systems, identity providers, and security orchestration tools, ensuring it fits well within existing security operations workflows. Notable features include AI-powered anomaly detection, natural language query reports, customizable alerting rules, and automated response actions that can block risky activities in real-time based on policy violations, enhancing the overall security posture of the organization. **Average Rating:** 4.6/5.0 **Total Reviews:** 171 #### How Do G2 Users Rate Teramind? - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.0/10) - **Ease of Use:** 8.8/10 (Category avg: 8.7/10) - **Continuous Analysis:** 9.1/10 (Category avg: 8.9/10) - **Anomaly Detection:** 8.6/10 (Category avg: 8.9/10) #### Who Is the Company Behind Teramind? - **Seller:** [Teramind](https://www.g2.com/sellers/teramind) - **Company Website:** www.teramind.co - **Year Founded:** 2014 - **HQ Location:** Aventura, FL - **Twitter:** @teramindco 883 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=a645e2bd6382ec5efd9d44f3b8e64f059162d74e155c8fefbd703a5a27c2a1d0&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F5090184%2F&secure%5Burl_type%5D=linkedin_company_website) 205 employees on LinkedIn® #### Who Uses This Product? - **Who Uses This:** IT Manager - **Top Industries:** Information Technology and Services, Financial Services - **Company Size:** 48% Small, 43% Medium #### What Do G2 Reviewers Say About Teramind? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **in-depth monitoring and alerts** from Teramind, enhancing oversight and facilitating easy reporting. - Users highlight the **outstanding customer support** of Teramind, noting quick responses and helpful assistance throughout their experience. - Users appreciate the **user-friendly monitoring** of Teramind, making remote employee oversight easy and effective. - Users value the **in-depth monitoring capabilities** of Teramind, enabling silent alerts and easy report access. - Users value the **alerts for silent monitoring** , which enhance awareness of website activity and data transfers. ##### Cons - Users find the **complex user interface** of Teramind challenging, impacting ease of navigation and management. - Users find the **difficult setup** of Teramind challenging, particularly for administrators during the initial phase. - Users note the need for improved **real-time monitoring** features in Teramind for better application tracking and analysis. - Users face **setup difficulties** with Teramind, as the complex interface and initial technical issues can disrupt management. - Users find the **user interface difficult to navigate** , complicating setup and daily management for new administrators. #### What Are Recent G2 Reviews of Teramind? **["User-Friendly Platform with Excellent Support and Strong ROI"](https://www.g2.com/survey_responses/teramind-review-13112148)** **Rating:** 4.5/5.0 stars _— Erick T._ [Read full review](https://www.g2.com/survey_responses/teramind-review-13112148) **["Teramind Delivers Clear Workforce Visibility with Outstanding Support"](https://www.g2.com/survey_responses/teramind-review-13114610)** **Rating:** 5.0/5.0 stars _— Allison A._ [Read full review](https://www.g2.com/survey_responses/teramind-review-13114610) #### What Are G2 Users Discussing About Teramind? - [What software do companies use to monitor employees?](https://www.g2.com/discussions/what-software-do-companies-use-to-monitor-employees) - 2 comments - [How do you use Teramind?](https://www.g2.com/discussions/how-do-you-use-teramind) - 2 comments - [Is Teramind safe?](https://www.g2.com/discussions/is-teramind-safe) - 2 comments - [What is Teramind?](https://www.g2.com/discussions/what-is-teramind) - 2 comments ### [Safetica](https://www.g2.com/products/safetica/reviews) Safetica’s Intelligent Data Security protects sensitive data where teams work, using powerful AI to deliver contextual awareness, reduce false positives, and stop real threats without disrupting productivity. With Safetica, security teams can maintain visibility and control over sensitive data, stay ahead of insider risks, maintain compliance, and secure sensitive cloud-based data. ✔️ Data Protection: Classify, monitor and control sensitive data across devices and clouds in real time. ✔️ Insider Risk and User Behavior: Spot risky behavior, detect intent, and stop insider threats to stay ahead of the careless handling of sensitive data, compromised user accounts and malicious user activity. ✔️ Compliance and Data Discovery: Prove compliance with audit-ready reporting for data in use, in motion, and at rest. ✔️ Cloud Security: Protect Microsoft 365, cloud, and file-sharing platforms to secure sensitive cloud-based data by monitoring, classifying files, and enforcing policies on M365 file operations. Safetica is available as a SaaS solution (Safetica Intelligent Data Security Platform) and On-Premises (Safetica On-Prem). Safetica covers the following data security solutions: ✅ Data Loss Prevention: Discover, classify, and protect sensitive data through visibility, continuous monitoring, and real-time awareness alerts defending against data loss, empowering users, and to support regulatory compliance. ✅ Insider Risk Management: Enhance the protection of sensitive data from insider threats with real-time detection of anomalous behavior while also gaining insight into employee productivity. ✅ Cloud Data Protection: Continuously protect valuable data across Microsoft 365 and Google Drive by extending existing protection policies —ensuring secure access, responsible sharing, and visibility into cloud-based workloads across devices and hybrid environments. ✅ AI-Powered Contextual Defense: Access an intelligent, adaptive layer of protection that learns typical user behavior to detect anomalies and proactively mitigate insider threats with real-time detection, risk scoring, and dynamic response. ✅ Data Discovery and Classification: Discover and classify sensitive data using content and contextual analysis —giving you the insight to identify risks, reduce exposure, and enforce compliance. ✅ Reporting and Administration: Safetica’s centralized console delivers clear, actionable insights—serving as a single source of truth for reviewing threats, enforcing policies, and investigating incidents. ✅ Device Control: Prevent unauthorized data access and reduce the risk of data loss by monitoring, controlling, and securing external devices connected to USB and peripheral ports across endpoints. ✅ User Activity and Workspace Audit: Protect sensitive data and reduce organizational risk by detecting both malicious and unintentional user activity —ensuring security, compliance, and visibility across your entire environment. ✅ Regulatory Compliance: Ensure data privacy and effortlessly maintain local and international compliance standards including GDPR, HIPAA, SOX, PCI-DSS, GLBA, ISO/IEC 27001, SOC2 or CCPA. **Average Rating:** 4.6/5.0 **Total Reviews:** 188 #### How Do G2 Users Rate Safetica? - **Has the product been a good partner in doing business?:** 8.9/10 (Category avg: 9.0/10) - **Ease of Use:** 9.0/10 (Category avg: 8.7/10) - **Continuous Analysis:** 9.0/10 (Category avg: 8.9/10) - **Anomaly Detection:** 8.7/10 (Category avg: 8.9/10) #### Who Is the Company Behind Safetica? - **Seller:** [Safetica](https://www.g2.com/sellers/safetica) - **Company Website:** www.safetica.com - **Year Founded:** 2011 - **HQ Location:** San Jose, California, United States - **Twitter:** @Safetica 664 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=addb161c3dc61ec2e171bae8f4e1392b011bc46dfe472c9fc09931b31ac08db2&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsafetica-technologies&secure%5Burl_type%5D=linkedin_company_website) 137 employees on LinkedIn® #### Who Uses This Product? - **Who Uses This:** IT Manager - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 58% Medium, 37% Small #### What Do G2 Reviewers Say About Safetica? _AI-generated summary from verified user reviews_ ##### Pros - Users appreciate the **ease of use** of Safetica, citing its intuitive interface and simple setup process. - Users value the **strong security** of Safetica, which enhances control over data and offers robust web protection. - Users value Safetica for its **effective data protection** and seamless integration of web security for remote work. - Users appreciate Safetica for its **comprehensive DLP features** , enhancing security and simplifying policy management. - Users appreciate the **intuitive and simple user interface** of Safetica, enhancing their overall security management experience. ##### Cons - Users report **slow performance** with Safetica, particularly during intensive monitoring and when interacting with certain software. - Users find the **complexity of advanced configurations** in Safetica can be overwhelming and tedious, requiring extra support. - Users face **integration issues** with Antimalware software and limited support for Mac and Linux devices, impacting overall functionality. - Users express concerns about **limited compatibility** , particularly with Linux and Mac devices, affecting usability. - Users report **performance issues** with Safetica, including slowdowns during monitoring and troubles with launching applications. #### What Are Recent G2 Reviews of Safetica? **["Effective DLP with Dashboard Insights, Needs Better Support"](https://www.g2.com/survey_responses/safetica-review-13185209)** **Rating:** 4.0/5.0 stars _— Sandeep S._ [Read full review](https://www.g2.com/survey_responses/safetica-review-13185209) **["complete DLP tool"](https://www.g2.com/survey_responses/safetica-review-11886138)** **Rating:** 5.0/5.0 stars _— Jaime Ulises G._ [Read full review](https://www.g2.com/survey_responses/safetica-review-11886138) #### What Are G2 Users Discussing About Safetica? - [What is Safetica used for?](https://www.g2.com/discussions/what-is-safetica-used-for) - 1 comment ### [Cynet](https://www.g2.com/products/cynet/reviews) Cynet is the unified, AI-powered cybersecurity platform that delivers robust and comprehensive protection for security teams while maximizing operational efficiency for managed service providers (MSPs). This platform consolidates a wide array of security capabilities into a single, user-friendly interface, ensuring that organizations can effectively safeguard their digital assets without the complexity often associated with multi-solution environments. Cynet’s platform simplifies security management by integrating various functionalities, such as endpoint protection, threat detection, and incident response, into one cohesive system. This integration not only streamlines operations but also allows organizations to allocate their resources more effectively, ultimately enhancing their overall security posture. One of the standout features of Cynet’s platform is its remarkable performance in the MITRE ATT&CK Evaluations. Cynet delivered 100% visibility and 100% analytic coverage without requiring any configuration changes three years in a row. This capability ensures that organizations can monitor their environments comprehensively and respond to threats with precision. The platform’s built-in analytics and reporting tools provide actionable insights, enabling users to make informed decisions about their cybersecurity strategies. Additionally, Cynet offers 24/7 expert support, which is crucial for organizations that may not have in-house cybersecurity expertise. This round-the-clock assistance ensures that users can quickly address any security incidents or concerns, minimizing potential downtime and damage. The combination of advanced technology and dedicated support positions Cynet as a valuable partner for SMEs and service providers looking to enhance their cybersecurity measures. In summary, Cynet’s unified, AI-powered cybersecurity platform stands out in the crowded cybersecurity market by offering a unified solution tailored to the needs of MSPs. Its comprehensive features, exceptional performance in industry evaluations, and continuous expert support make it a compelling choice for organizations seeking to bolster their cybersecurity defenses while maintaining operational efficiency. **Average Rating:** 4.7/5.0 **Total Reviews:** 218 #### How Do G2 Users Rate Cynet? - **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.0/10) - **Ease of Use:** 9.1/10 (Category avg: 8.7/10) - **Continuous Analysis:** 9.5/10 (Category avg: 8.9/10) - **Anomaly Detection:** 9.4/10 (Category avg: 8.9/10) #### Who Is the Company Behind Cynet? - **Seller:** [Cynet](https://www.g2.com/sellers/cynet) - **Company Website:** www.cynet.com - **Year Founded:** 2014 - **HQ Location:** Boston, MA - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=5a5ebaacd6a1a812a193b2886c91aa7e64aeee7fb30bb25e658549d729d68178&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcynet-security%2F&secure%5Burl_type%5D=linkedin_company_website) 332 employees on LinkedIn® #### Who Uses This Product? - **Who Uses This:** SOC Analyst, Technical Engineer - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 58% Medium, 30% Small #### What Do G2 Reviewers Say About Cynet? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **ease of use** of Cynet, enjoying its simplicity and comprehensive features in one dashboard. - Users value the **unified platform** of Cynet for its ease of use and comprehensive security features. - Users value Cynet for its **effective threat detection** and seamless integration, ensuring robust cybersecurity for their business. - Users appreciate the **exceptional customer support** of Cynet, facilitating smooth deployment and effective threat management. - Users commend Cynet for its **flawless threat monitoring and response** , enhancing overall security with effective detection capabilities. ##### Cons - Users express concern over **limited customization** options in reports and third-party integrations, impacting their experience. - Users note the **feature limitations** of Cynet, especially in report customization and external tool integrations. - Users express concern over the **lack of customization** , particularly in reporting and dashboard options for better usability. - Users find Cynet has **limited features** like integrations and customization, which may restrict advanced functionality. - Users note the **missing features** in Cynet, particularly the lack of web filtering and a firewall option. #### What Are Recent G2 Reviews of Cynet? **["Great MDR/XDR Platform"](https://www.g2.com/survey_responses/cynet-review-9481539)** **Rating:** 4.5/5.0 stars _— JEROME J._ [Read full review](https://www.g2.com/survey_responses/cynet-review-9481539) **["Effective Built-In Protection with Straightforward Management"](https://www.g2.com/survey_responses/cynet-review-13148656)** **Rating:** 5.0/5.0 stars _— Buse ._ [Read full review](https://www.g2.com/survey_responses/cynet-review-13148656) #### What Are G2 Users Discussing About Cynet? - [What is Cynet 360 AutoXDR™ used for?](https://www.g2.com/discussions/what-is-cynet-360-autoxdr-used-for) - [What is cynet XDR?](https://www.g2.com/discussions/what-is-cynet-xdr) - 1 comment - [What is cynet used for?](https://www.g2.com/discussions/what-is-cynet-used-for) - 1 comment - [Is cynet 360 good?](https://www.g2.com/discussions/is-cynet-360-good) - 3 comments - [How much does cynet cost?](https://www.g2.com/discussions/how-much-does-cynet-cost) - 1 comment ### [ManageEngine ADAudit Plus](https://www.g2.com/products/manageengine-adaudit-plus/reviews) ADAudit Plus is a UBA-driven auditor that helps keep your AD, Azure AD, file systems (including Windows, NetApp, EMC, Synology, Hitachi, and Huawei), Windows servers, and workstations secure and compliant. ADAudit Plus transforms raw and noisy event log data into real-time reports and alerts, enabling you to get full visibility into activities happening across your Windows Server ecosystem in just a few clicks. More than 10,000 organizations across the world trust ADAudit Plus to: 1. Instantly notify them about changes in their Windows Server environments. 2. Continuously track Windows user logon activity. 3. Monitor the active and idle time spent by employees at their workstations. 4. Detect and troubleshoot AD account lockouts. 5. Provide a consolidated audit trail of privileged user activities across their domains. 6. Track changes and sign-ins in Azure AD. 7. Audit file accesses across Windows, NetApp, EMC, Synology, Hitachi, and Huawei file systems. 8. Monitor file integrity across local files residing on Windows systems. 9. Mitigate insider threats by leveraging UBA and response automation. 10. Generate audit-ready compliance reports for SOX, the GDPR, and other IT mandates. **Average Rating:** 4.6/5.0 **Total Reviews:** 59 #### How Do G2 Users Rate ManageEngine ADAudit Plus? - **Has the product been a good partner in doing business?:** 8.5/10 (Category avg: 9.0/10) - **Ease of Use:** 8.8/10 (Category avg: 8.7/10) - **Continuous Analysis:** 8.1/10 (Category avg: 8.9/10) - **Anomaly Detection:** 8.6/10 (Category avg: 8.9/10) #### Who Is the Company Behind ManageEngine ADAudit Plus? - **Seller:** [Zoho](https://www.g2.com/sellers/zoho-b00ca9d5-bca8-41b5-a8ad-275480841704) - **Year Founded:** 1996 - **HQ Location:** Austin, TX - **Twitter:** @Zoho 137,880 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9c8e45ddb296c32c6c5597ef9ba945c94562c57624f7bd1dcf1a9e9931f71578&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F38373%2F&secure%5Burl_type%5D=linkedin_company_website) 30,766 employees on LinkedIn® - **Phone:** +1 (888) 900-9646 #### Who Uses This Product? - **Top Industries:** Information Technology and Services, Hospital & Health Care - **Company Size:** 59% Medium, 32% Large #### What Do G2 Reviewers Say About ManageEngine ADAudit Plus? _AI-generated summary from verified user reviews_ ##### Pros - Users appreciate the **depth of reporting** in ADAudit Plus, enhancing visibility into AD environments with prebuilt options. - Users value the **intuitive dashboard usability** of ADAudit Plus, offering easy navigation and comprehensive reporting options. - Users appreciate the **easy setup and extensive reporting options** in ManageEngine ADAudit Plus for effective monitoring. - Users value the **dashboard design** of ADAudit Plus for its comprehensive overview and detailed reporting options. - Users value the **intuitive dashboard and extensive reporting options** in ADAudit Plus for effective Active Directory management. ##### Cons - Users find the **limited alert levels** insufficient for fine-tuning notifications, despite helpful reporting options and search features. - Users find the **data overload** from numerous reporting options overwhelming, making it hard to locate specific reports. - Users find the product **expensive** , which impacts their overall satisfaction despite its features and capabilities. - Users experience **false positives** with alerts, which could be improved by more granularity in severity levels. - Users are frustrated with the **high resource usage** of ManageEngine ADAudit Plus, impacting system performance significantly. #### What Are Recent G2 Reviews of ManageEngine ADAudit Plus? **["Easy Setup, Powerful Reporting, and Great Value"](https://www.g2.com/survey_responses/manageengine-adaudit-plus-review-12999020)** **Rating:** 4.5/5.0 stars _— Ryan A._ [Read full review](https://www.g2.com/survey_responses/manageengine-adaudit-plus-review-12999020) **["Great Tool for Active Directory Auditing and Investigations"](https://www.g2.com/survey_responses/manageengine-adaudit-plus-review-13001820)** **Rating:** 5.0/5.0 stars _— Jose R._ [Read full review](https://www.g2.com/survey_responses/manageengine-adaudit-plus-review-13001820) #### What Are G2 Users Discussing About ManageEngine ADAudit Plus? - [What does AD audit do?](https://www.g2.com/discussions/what-does-ad-audit-do) - [Is Ad audit plus a SIEM?](https://www.g2.com/discussions/is-ad-audit-plus-a-siem) - [What is ManageEngine Audit Plus?](https://www.g2.com/discussions/what-is-manageengine-audit-plus) - [What does ADAudit plus do?](https://www.g2.com/discussions/what-does-adaudit-plus-do) ### [Palo Alto Cortex XSIAM](https://www.g2.com/products/palo-alto-cortex-xsiam/reviews) Product Description: Palo Alto Networks' Cortex XSIAM is an AI-driven security operations platform designed to transform traditional Security Operations Centers by integrating and automating key functions such as data centralization, threat detection, and incident response. By leveraging machine learning and automation, it enables organizations to detect and respond to threats more efficiently, reducing manual workloads and improving overall security posture. Key Features and Functionality: - Data Centralization: Aggregates data from various sources into a unified platform, providing comprehensive visibility across the enterprise. - AI-Powered Threat Detection: Utilizes machine learning algorithms to identify anomalies and potential threats in real-time. - Automated Incident Response: Streamlines response processes through automation, enabling rapid mitigation of security incidents. - Integrated SOC Capabilities: Combines functions such as Extended Detection and Response , Security Orchestration, Automation, and Response , Attack Surface Management , and Security Information and Event Management into a cohesive platform, eliminating the need for multiple disparate tools. - Scalability: Designed to handle large volumes of data and adapt to the evolving needs of modern enterprises. Primary Value and Problem Solved: Cortex XSIAM addresses the challenges of disjointed data, weak threat defense, and heavy reliance on manual work in traditional SOCs. By centralizing data and automating security operations, it simplifies processes, enhances threat detection accuracy, and accelerates incident response times. This transformation enables organizations to proactively outpace threats, reduce operational costs, and achieve a more robust security posture. **Average Rating:** 4.5/5.0 **Total Reviews:** 84 #### How Do G2 Users Rate Palo Alto Cortex XSIAM? - **Has the product been a good partner in doing business?:** 8.5/10 (Category avg: 9.0/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) - **Continuous Analysis:** 9.0/10 (Category avg: 8.9/10) - **Anomaly Detection:** 9.2/10 (Category avg: 8.9/10) #### Who Is the Company Behind Palo Alto Cortex XSIAM? - **Seller:** [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks) - **Company Website:** www.paloaltonetworks.com - **Year Founded:** 2005 - **HQ Location:** Santa Clara, CA - **Twitter:** @PaloAltoNtwks 128,951 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=283fa006a7b7db5565e608e4d1bc1dafae45bdf4b312f2cd5bb208ac9271f81d&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F30086%2F&secure%5Burl_type%5D=linkedin_company_website) 22,313 employees on LinkedIn® #### Who Uses This Product? - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 44% Large, 36% Medium #### What Do G2 Reviewers Say About Palo Alto Cortex XSIAM? _AI-generated summary from verified user reviews_ ##### Pros - Users highlight **best-in-class log management** and effective alerting features, enhancing the overall usability and integration. - Users appreciate the **user-friendly dashboards** of Palo Alto Cortex XSIAM, highlighting ease of understanding alerts and metrics. - Users value the **real-time monitoring** capabilities of Palo Alto Cortex XSIAM, enhancing threat detection and response efficiency. - Users appreciate the **user-friendly interface** of Palo Alto Cortex XSIAM, making monitoring and deployment seamless and efficient. - Users appreciate the **good dashboard customization** in Palo Alto Cortex XSIAM, citing ease of use and integration. ##### Cons - Users find the solution **resource intensive** , increasing costs and complicating implementation due to high hardware requirements. - Users find the **complex implementation** of Palo Alto Cortex XSIAM time-consuming and resource-intensive, requiring significant technical expertise. - Users find the **cost** of Palo Alto Cortex XSIAM to be higher than competitors, impacting affordability for smaller companies. - Users report **dashboard issues** that hinder monitoring and create a messy interface, impacting usability and visibility. - Users struggle with the **difficult setup** of Palo Alto Cortex XSIAM, finding it complex and time-consuming for implementation. #### What Are Recent G2 Reviews of Palo Alto Cortex XSIAM? **["Palo Alto Cortex XSIAM: Centralized Security with Powerful AI Automation"](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-13174734)** **Rating:** 4.5/5.0 stars _— Tim H._ [Read full review](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-13174734) **["One phishing incident could have buried our team but cortex XSIAM connected the whole story."](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-13174681)** **Rating:** 5.0/5.0 stars _— Audrey W._ [Read full review](https://www.g2.com/survey_responses/palo-alto-cortex-xsiam-review-13174681) #### What Are G2 Users Discussing About Palo Alto Cortex XSIAM? - [What is IBM Security ReaQta used for?](https://www.g2.com/discussions/what-is-ibm-security-reaqta-used-for) - 1 comment - [What does QRadar stand for?](https://www.g2.com/discussions/what-does-qradar-stand-for) - 1 comment, 1 upvote - [How do I use IBM QRadar?](https://www.g2.com/discussions/how-do-i-use-ibm-qradar) - 1 comment - [What are the key component of IBM QRadar?](https://www.g2.com/discussions/what-are-the-key-component-of-ibm-qradar) - 1 comment - [What is IBM QRadar Siem?](https://www.g2.com/discussions/what-is-ibm-qradar-siem) - 1 comment ### [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) Outsmart threats with an end-to-end award-winning security suite; proven to prevent, endure and recover from both known & unknown IT hazards faced by SoCs in the modern-day. **Average Rating:** 4.4/5.0 **Total Reviews:** 283 #### How Do G2 Users Rate IBM QRadar SIEM? - **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.0/10) - **Ease of Use:** 8.4/10 (Category avg: 8.7/10) - **Continuous Analysis:** 8.3/10 (Category avg: 8.9/10) - **Anomaly Detection:** 8.2/10 (Category avg: 8.9/10) #### Who Is the Company Behind IBM QRadar SIEM? - **Seller:** [IBM](https://www.g2.com/sellers/ibm) - **Year Founded:** 1911 - **HQ Location:** Armonk, New York, United States - **Twitter:** @IBMSecurity 74,660 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=14b544adaece4fdbc987f1d7f7028048c22259946811200cc751263825586af9&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F1009%2F&secure%5Burl_type%5D=linkedin_company_website) 328,202 employees on LinkedIn® - **Ownership:** SWX:IBM #### Who Uses This Product? - **Who Uses This:** SOC Analyst, Security Engineer - **Top Industries:** Computer & Network Security, Information Technology and Services - **Company Size:** 52% Large, 29% Medium #### What Do G2 Reviewers Say About IBM QRadar SIEM? _AI-generated summary from verified user reviews_ ##### Pros - Users find IBM QRadar SIEM highly **user-friendly** , appreciating its ease of implementation and integration with other platforms. - Users appreciate the **seamless integration capabilities** of IBM QRadar SIEM, enhancing overall log management and analytics functionality. - Users value the **advanced threat detection and centralized log management** features of IBM QRadar SIEM for enhanced security. - Users value the **easy integrations** of IBM QRadar SIEM, simplifying collaboration with various platforms and tools. - Users find the **user-friendly interface** of IBM QRadar SIEM makes it easy for non-tech users to navigate. ##### Cons - Users find the **UI improvements lacking** , with search limitations and poor report building hindering their experience. - Users find IBM QRadar SIEM to be **expensive** , especially for small or mid-size companies due to high costs. - Users note the **high costs** associated with IBM QRadar SIEM, which may burden smaller organizations significantly. - Users are frustrated by **dashboard issues** , including limited editing rights and difficulties in offense management and reporting. - Users find the **time-consuming search queries** to be frustrating and inefficient for log retrieval in QRadar SIEM. #### What Are Recent G2 Reviews of IBM QRadar SIEM? **["QRADAR Integrates Easily and Makes Logs & Alerts Report-Ready"](https://www.g2.com/survey_responses/ibm-qradar-siem-review-13061810)** **Rating:** 4.5/5.0 stars _— Zahid A._ [Read full review](https://www.g2.com/survey_responses/ibm-qradar-siem-review-13061810) **["Strong Correlation, Mature Security Monitoring, and Compliance Reporting"](https://www.g2.com/survey_responses/ibm-qradar-siem-review-12986703)** **Rating:** 5.0/5.0 stars _— Verified User in Information Technology and Services_ [Read full review](https://www.g2.com/survey_responses/ibm-qradar-siem-review-12986703) ### [Microsoft Defender for Identity](https://www.g2.com/products/microsoft-defender-for-identity/reviews) Microsoft Defender for Identity enables you to integrate Microsoft Defender for Identity with Defender for Endpoint, for an even more complete threat protection solution. While Defender for Identity monitors the traffic on your domain controllers, Defender for Endpoint monitors your endpoints, together providing a single interface from which you can protect your environment. **Average Rating:** 4.3/5.0 **Total Reviews:** 93 #### How Do G2 Users Rate Microsoft Defender for Identity? - **Has the product been a good partner in doing business?:** 8.2/10 (Category avg: 9.0/10) - **Ease of Use:** 8.1/10 (Category avg: 8.7/10) - **Continuous Analysis:** 8.2/10 (Category avg: 8.9/10) - **Anomaly Detection:** 8.3/10 (Category avg: 8.9/10) #### Who Is the Company Behind Microsoft Defender for Identity? - **Seller:** [Microsoft](https://www.g2.com/sellers/microsoft) - **Year Founded:** 1975 - **HQ Location:** Redmond, Washington - **Twitter:** @microsoft 13,091,739 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9458f51bd6ded48ad432a804f19ad736469f007787569b63827154231c315630&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fmicrosoft%2F&secure%5Burl_type%5D=linkedin_company_website) 231,632 employees on LinkedIn® - **Ownership:** MSFT #### Who Uses This Product? - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 39% Large, 32% Small #### What Are Recent G2 Reviews of Microsoft Defender for Identity? **["Powerful Security with Seamless Integration"](https://www.g2.com/survey_responses/microsoft-defender-for-identity-review-8093624)** **Rating:** 4.5/5.0 stars _— Devender K._ [Read full review](https://www.g2.com/survey_responses/microsoft-defender-for-identity-review-8093624) **["Effective Identity Security"](https://www.g2.com/survey_responses/microsoft-defender-for-identity-review-12702851)** **Rating:** 5.0/5.0 stars _— Rawad A._ [Read full review](https://www.g2.com/survey_responses/microsoft-defender-for-identity-review-12702851) ### [Rapid7 Next-Gen SIEM](https://www.g2.com/products/rapid7-next-gen-siem/reviews) Rapid7 InsightIDR is a SaaS SIEM for modern threat detection and response. InsightIDR enables security analysts to work more efficiently and effectively, by unifying diverse data sources, providing early and reliable out of the box detections, and delivering rich visual investigations and automation to expedite response. With a lightweight cloud deployment and intuitive UI and onboarding experience, InsightIDR customers recognize an accelerated return on their investment and start seeing valuable insights from Day 1. With InsightIDR, teams can advance their threat detection and response program without adding headcount. **Average Rating:** 4.4/5.0 **Total Reviews:** 69 #### How Do G2 Users Rate Rapid7 Next-Gen SIEM? - **Has the product been a good partner in doing business?:** 8.7/10 (Category avg: 9.0/10) - **Ease of Use:** 8.9/10 (Category avg: 8.7/10) - **Continuous Analysis:** 8.6/10 (Category avg: 8.9/10) - **Anomaly Detection:** 8.3/10 (Category avg: 8.9/10) #### Who Is the Company Behind Rapid7 Next-Gen SIEM? - **Seller:** [Rapid7](https://www.g2.com/sellers/rapid7) - **Year Founded:** 2000 - **HQ Location:** Boston, MA - **Twitter:** @rapid7 124,405 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=04bdb542ee8372d372b62e305f57e5c7aefbd59efac3d6831f78fcc71f4f819c&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F39624%2F&secure%5Burl_type%5D=linkedin_company_website) 3,274 employees on LinkedIn® - **Ownership:** NASDAQ:RPD #### Who Uses This Product? - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 67% Medium, 30% Large #### What Do G2 Reviewers Say About Rapid7 Next-Gen SIEM? _AI-generated summary from verified user reviews_ ##### Pros - Users appreciate the **ease of use** of Rapid7 Next-Gen SIEM, facilitating effortless log management and integration. - Users appreciate the **easy integrations** of Rapid7 Next-Gen SIEM, enhancing compatibility with various third-party tools effortlessly. - Users value the **easy integrations** with third-party tools, enhancing functionality and streamlining security management. - Users appreciate the **effective threat detection** capabilities of Rapid7 Next-Gen SIEM, enhancing investigation speed and efficiency. - Users appreciate the **visibility** of Rapid7 Next-Gen SIEM, enabling easy search and understanding of log data. ##### Cons - Users find the **limited features** of Rapid7 Next-Gen SIEM restrictive compared to larger competitors, hindering alert creation. - Users find the **alerting capabilities limited** , making it challenging to create timely and effective alerts. - Users find the **alert management limited** , making it challenging to create effective and timely alerts. - Users find the **difficult customization** process frustrating, especially when creating alerts and setting patterns. - Users find the **difficult setup** of Rapid7 Next-Gen SIEM frustrating, especially for creating alerts and patterns. #### What Are Recent G2 Reviews of Rapid7 Next-Gen SIEM? **["Intuitive, High-Performance SIEM with Great Support and Cost-Effective Value"](https://www.g2.com/survey_responses/rapid7-next-gen-siem-review-12711350)** **Rating:** 4.5/5.0 stars _— Nihal J._ [Read full review](https://www.g2.com/survey_responses/rapid7-next-gen-siem-review-12711350) **["Fast, Easy Queries with a Powerful Plain-Text-to-LEQL AI Feature"](https://www.g2.com/survey_responses/rapid7-next-gen-siem-review-13140538)** **Rating:** 4.0/5.0 stars _— Verified User in Information Technology and Services_ [Read full review](https://www.g2.com/survey_responses/rapid7-next-gen-siem-review-13140538) #### What Are G2 Users Discussing About Rapid7 Next-Gen SIEM? - [What is InsightIDR used for?](https://www.g2.com/discussions/what-is-insightidr-used-for) - [What is rapid7 InsightVM?](https://www.g2.com/discussions/what-is-rapid7-insightvm) - [Is rapid7 a SIEM?](https://www.g2.com/discussions/is-rapid7-a-siem) - [What is rapid7 used for?](https://www.g2.com/discussions/insightidr-what-is-rapid7-used-for) - [What is InsightIDR?](https://www.g2.com/discussions/what-is-insightidr) ### [ActivTrak](https://www.g2.com/products/activtrak/reviews) ActivTrak provides the Work Intelligence organizations need to understand how work changes in the AI era. As the system of record for work, its award-winning platform captures behavioral data across people, tools and AI agents, and the workflows that connect them — enabling leaders to measure impact, optimize productivity and improve operational performance. The platform also powers research through the ActivTrak Productivity Lab. Built on a privacy-first data foundation, ActivTrak is trusted by more than 9,500 organizations worldwide and recognized by Deloitte’s Technology Fast 500, Inc. 5000, TrustRadius and G2 for delivering measurable ROI and stronger business outcomes. The company is backed by Elsewhere Partners, Sapphire Ventures and Francisco Partners. Learn more at www.activtrak.com. **Average Rating:** 4.3/5.0 **Total Reviews:** 331 #### How Do G2 Users Rate ActivTrak? - **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.0/10) - **Ease of Use:** 8.4/10 (Category avg: 8.7/10) - **Continuous Analysis:** 8.8/10 (Category avg: 8.9/10) - **Anomaly Detection:** 8.1/10 (Category avg: 8.9/10) #### Who Is the Company Behind ActivTrak? - **Seller:** [Birch Grove Software, Inc.](https://www.g2.com/sellers/birch-grove-software-inc) - **Company Website:** www.activtrak.com - **Year Founded:** 2009 - **HQ Location:** Austin, TX - **Twitter:** @activtrak 5,821 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=2ed471988db14ff355c4cf07e1307463bc11be5b29c37469fed8a9f72631ce0f&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F3768148%2F&secure%5Burl_type%5D=linkedin_company_website) 185 employees on LinkedIn® #### Who Uses This Product? - **Who Uses This:** IT Manager, Operations Manager - **Top Industries:** Information Technology and Services, Hospital & Health Care - **Company Size:** 53% Small, 43% Medium #### What Do G2 Reviewers Say About ActivTrak? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **ease of use** of ActivTrak, praising its intuitive interface and straightforward reporting features. - Users value the **productivity improvement** ActivTrak offers by providing clear visibility into employee activity and performance. - Users value the **real-time employee monitoring** capabilities of ActivTrak, enhancing productivity awareness and management. - Users value the **clear visibility and efficient reporting** provided by ActivTrak, enhancing productivity and team management. - Users appreciate the **helpful insights** from ActivTrak, enhancing team productivity and enabling effective performance tracking. ##### Cons - Users find ActivTrak's **complexity** overwhelming, as navigating detailed data and manual categorization can be tedious and time-consuming. - Users criticize ActivTrak for its **insufficient detail** in reports, making essential data hard to find and digest. - Users feel the **limited features** of ActivTrak hinder usability and increase costs without enough value at scale. - Users find the **user interface not user-friendly** , making navigation and detailed analysis cumbersome for team members. - Users find the **difficult navigation** of ActivTrak hampers their ability to efficiently access important work details. #### What Are Recent G2 Reviews of ActivTrak? **["User-Friendly Tracking with Detailed, Printable Data Views"](https://www.g2.com/survey_responses/activtrak-review-13178309)** **Rating:** 4.0/5.0 stars _— Kainaat M._ [Read full review](https://www.g2.com/survey_responses/activtrak-review-13178309) **["Productivity Tool That Make Resource Management Easy"](https://www.g2.com/survey_responses/activtrak-review-13178241)** **Rating:** 5.0/5.0 stars _— Min Fong H._ [Read full review](https://www.g2.com/survey_responses/activtrak-review-13178241) #### What Are G2 Users Discussing About ActivTrak? - [What is ActivTrak used for?](https://www.g2.com/discussions/what-is-activtrak-used-for) - [How do I know if ActivTrak is installed?](https://www.g2.com/discussions/how-do-i-know-if-activtrak-is-installed) - [How do you stop ActivTrak?](https://www.g2.com/discussions/how-do-you-stop-activtrak) - [How do you use ActivTrak?](https://www.g2.com/discussions/how-do-you-use-activtrak) - [What can ActivTrak see?](https://www.g2.com/discussions/what-can-activtrak-see) ### [NetWitness Platform](https://www.g2.com/products/netwitness-platform/reviews) NetWitness is a comprehensive threat detection, investigation and response platform that combines visibility, analytics, insight, and automation into a single solution. It collects and analyzes data across all capture points (logs, packets, netflow, endpoint and IoT) and computing platforms (physical, virtual and cloud), enriching data with threat intelligence and business context. **Average Rating:** 3.9/5.0 **Total Reviews:** 23 #### How Do G2 Users Rate NetWitness Platform? - **Has the product been a good partner in doing business?:** 8.5/10 (Category avg: 9.0/10) - **Ease of Use:** 7.7/10 (Category avg: 8.7/10) - **Continuous Analysis:** 8.6/10 (Category avg: 8.9/10) - **Anomaly Detection:** 9.2/10 (Category avg: 8.9/10) #### Who Is the Company Behind NetWitness Platform? - **Seller:** [NetWitness](https://www.g2.com/sellers/netwitness) - **Year Founded:** 1997 - **HQ Location:** Bedford, MA - **Twitter:** @Netwitness 1,621 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8ae249a18b34c6a0f632d7c0953c6bcf05c3692f1f32add16a5d89d58de98cdb&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fnetwitness-platform%2F&secure%5Burl_type%5D=linkedin_company_website) 194 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 54% Large, 33% Medium #### What Do G2 Reviewers Say About NetWitness Platform? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **centralized management** of NetWitness Platform for its comprehensive threat hunting capabilities across various data sources. - Users appreciate the **converged capabilities** of NetWitness Platform, which streamline threat hunting and reduce tool sprawl. - Users appreciate the **packet capture and replay capabilities** of NetWitness Platform, essential for thorough forensic investigations. - Users appreciate the **ability to capture full network packets** , enhancing their deep forensic investigation capabilities. - Users value the **centralized view** offered by the Management Console, enhancing efficiency in threat hunting across diverse environments. ##### Cons - Users find the **complex implementation** of NetWitness Platform challenging, needing significant technical expertise for deployment and upgrades. - Users find the **initial deployment and upgrades complicated** , often necessitating significant technical expertise and leading to instability. - Users find the **initial setup complex** , often needing extensive technical expertise, and face challenges during upgrades. - Users find the **deployment difficulties** of NetWitness Platform challenging, needing extensive expertise and facing upgrade instability. - Users find the **expertise required** for initial deployment and upgrades complicates their experience with NetWitness Platform. #### What Are Recent G2 Reviews of NetWitness Platform? **["All-in-One Security Console for Centralized Threat Hunting"](https://www.g2.com/survey_responses/netwitness-platform-review-12381089)** **Rating:** 5.0/5.0 stars _— Verified User in Information Services_ [Read full review](https://www.g2.com/survey_responses/netwitness-platform-review-12381089) **["A Powerhouse in Endpoint, Network, and SIEM Integration."](https://www.g2.com/survey_responses/netwitness-platform-review-11524038)** **Rating:** 4.0/5.0 stars _— pushpendra Y._ [Read full review](https://www.g2.com/survey_responses/netwitness-platform-review-11524038) #### What Are G2 Users Discussing About NetWitness Platform? - [What is one of the biggest differentiators for RSA NetWitness platform?](https://www.g2.com/discussions/what-is-one-of-the-biggest-differentiators-for-rsa-netwitness-platform) - [What types of data can the RSA NetWitness platform capture and process?](https://www.g2.com/discussions/what-types-of-data-can-the-rsa-netwitness-platform-capture-and-process) - [What is NetWitness used for?](https://www.g2.com/discussions/what-is-netwitness-used-for) - 1 comment - [What does RSA NetWitness do?](https://www.g2.com/discussions/what-does-rsa-netwitness-do) ### [CyberArk Workforce Identity](https://www.g2.com/products/cyberark-workforce-identity/reviews) CyberArk Identity Overview CyberArk Identity is a SaaS-delivered suite of solutions designed to simplify identity and access management in enterprises. CyberArk Identity unifies Workforce Access and Identity Management solutions in a single offering. Workforce Access capabilities include single sign-on, multi-factor authentication, session security, and credential management. Identity Management capabilities include lifecycle management, identity orchestration, and identity governance. With CyberArk Identity, organizations can secure workforce access to applications, endpoints, and infrastructure and protect themselves from the leading cause of data breaches – compromised credentials. CyberArk Identity is part of the CyberArk Identity Security Platform. Built for the dynamic enterprise, CyberArk Identity Security Platform secures access for any identity to any resource or environment from anywhere using any device. The CyberArk Identity Security Platform enables operational efficiencies with a single admin portal, streamlines meeting compliance requirements with unified audit capabilities, and delivers Identity Security Intelligence for continuous identity threat detection and protection. Workforce Access solutions: • CyberArk Single Sign-On (SSO) is an easy-to-manage solution for one-click access to your cloud, mobile, and legacy apps. CyberArk SSO enables a secure and frictionless sign-in experience for both internal and external users that adjusts based on risk. • CyberArk App Gateway is an add-on to our Single Sign-On solution that enables VPN-less access to legacy applications. It allows companies to set up per-application, per-user access to individual legacy applications hosted on-premises. • CyberArk Adaptive Multi-Factor Authentication (MFA) helps strengthen security and prevent attacks involving compromised credentials by requiring users to present multiple forms of evidence to gain access to your applications. Unlike traditional MFA solutions, CyberArk Adaptive MFA uses AI-powered behavioral analytics and contextual information to determine which authentication factors to apply to a particular user in a specific situation. • CyberArk Secure Web Sessions is a cloud-based service that enables organizations to monitor, record, and audit end-user activity within high-risk and high-value web applications. Security and compliance specialists can use Secure Web Sessions to search recorded sessions using free text input and quickly filter events by users, dates, and actions. • CyberArk Workforce Password Management is an enterprise-focused password manager providing a user-friendly solution to store business application credentials in a centralized vault and securely share them with other users in the organization. Identity Management Services: • CyberArk Identity Lifecycle Management provides an easy way to route application access requests, create application accounts, manage entitlements for those accounts, and revoke access when necessary. • CyberArk Identity Flows is an identity orchestration solution that improves security, efficiency, and productivity by automating identity data and events. With Identity Flows, organizations can orchestrate complex identity management processes and synchronize identity data across diverse applications, directory stores, and repositories. • CyberArk Identity Compliance solution continuously discovers access, streamlines access certifications, and provides comprehensive identity analytics. Identity Compliance automates manually intensive, error-prone administrative processes, ensuring all workforce and privileged access rights are properly assigned and continually certified across enterprises. **Average Rating:** 4.5/5.0 **Total Reviews:** 126 #### How Do G2 Users Rate CyberArk Workforce Identity? - **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.0/10) - **Ease of Use:** 8.8/10 (Category avg: 8.7/10) #### Who Is the Company Behind CyberArk Workforce Identity? - **Seller:** [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks) - **Year Founded:** 2005 - **HQ Location:** Santa Clara, CA - **Twitter:** @PaloAltoNtwks 128,951 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=283fa006a7b7db5565e608e4d1bc1dafae45bdf4b312f2cd5bb208ac9271f81d&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F30086%2F&secure%5Burl_type%5D=linkedin_company_website) 22,313 employees on LinkedIn® - **Ownership:** NYSE: PANW #### Who Uses This Product? - **Top Industries:** Information Technology and Services, Financial Services - **Company Size:** 48% Large, 48% Medium #### What Do G2 Reviewers Say About CyberArk Workforce Identity? _AI-generated summary from verified user reviews_ ##### Pros - Users praise CyberArk Workforce Identity for its **ease of use** , featuring an intuitive UI and straightforward setup. - Users value the **efficient access review process** of CyberArk Workforce Identity, enhancing productivity and streamlining permissions. - Users appreciate the **intuitive interface** of CyberArk Workforce Identity, making it user-friendly for diverse teams. - Users value the **responsiveness and friendliness** of CyberArk's customer support, enhancing their overall experience with the product. - Users value the **effective access review capabilities** of CyberArk Workforce Identity, enhancing security and management in organizations. ##### Cons - Users find the **missing integrations and limited dashboard capabilities** to hinder full functionality of CyberArk Workforce Identity. - Users note significant **integration issues** , as many legacy platforms and manual processes hinder smooth functionality. - Users express frustration over the **lack of automation** , especially in user mapping and integration processes within CyberArk Workforce Identity. - Users find the **lack of integrations and reporting options** limits CyberArk Workforce Identity's effectiveness for their needs. - Users are frustrated by **manual processes** in CyberArk Workforce Identity, particularly with user mapping and integration challenges. #### What Are Recent G2 Reviews of CyberArk Workforce Identity? **["Fast User-Device Linking, Needs Installation Speed Boost"](https://www.g2.com/survey_responses/cyberark-workforce-identity-review-12700425)** **Rating:** 4.0/5.0 stars _— Dominika T._ [Read full review](https://www.g2.com/survey_responses/cyberark-workforce-identity-review-12700425) **["The way Access Reviews should be!"](https://www.g2.com/survey_responses/cyberark-workforce-identity-review-8369131)** **Rating:** 5.0/5.0 stars _— kam n._ [Read full review](https://www.g2.com/survey_responses/cyberark-workforce-identity-review-8369131) #### What Are G2 Users Discussing About CyberArk Workforce Identity? - [What are the benefits and drawbacks of using CyberArk Identity for identity and access management?](https://www.g2.com/discussions/what-are-the-benefits-and-drawbacks-of-using-cyberark-identity-for-identity-and-access-management) ### [Exabeam New-Scale Platform](https://www.g2.com/products/exabeam-exabeam-new-scale-platform/reviews) The Exabeam New-Scale Security Operations Platform is built to help organizations detect, investigate, and respond to insider threats tied to both human users and non-human identities. It brings together behavioral analytics, automation, and AI-driven workflows to help security operations teams reduce risk and maintain operational integrity. The platform supports AI agent-powered threat detection, investigation, and response (TDIR) by automating high-friction tasks and applying behavioral context to every signal. By combining proactive risk identification with fast, guided response, the New-Scale Platform helps teams move from alert handling to informed decision-making. Designed for enterprise security operations teams, the New-Scale Platform supports organizations that need consistent visibility into internal risk without adding operational overhead. Analysts use behavioral analytics to understand what is normal for a user or agent, then quickly spot meaningful deviations. This approach is especially valuable in data-sensitive industries such as finance, healthcare, and technology, where internal misuse, compromised credentials, or agent misuse can create immediate business impact. At the core of the New-Scale Platform is advanced behavioral analytics. The platform analyzes activity patterns across identities, devices, and services to establish baselines of normal behavior. When activity deviates from those baselines, dynamic risk scoring helps security teams focus on the activity most likely to indicate misuse or compromise. This reduces alert noise and shortens the time it takes to understand what is happening and why. The New-Scale Platform also extends user and entity behavior analytics (UEBA) to non-human identities through Agent Behavior Analytics (ABA). ABA applies the same behavior-based approach as UEBA to service accounts, APIs, automation tools, and AI agents. By monitoring how agents typically interact with data and systems, the platform helps teams detect misuse, drift, or compromise that traditional controls often miss. Automation plays a central role in improving day-to-day operations. The New-Scale Platform automates investigation steps, enrichment, and response actions within TDIR workflows, allowing analysts to spend less time on repetitive tasks and more time validating risk and containing incidents. Behavioral context and AI-driven prioritization help teams address the most relevant threats first, improving response consistency without increasing workload. With the Exabeam New-Scale Platform, security teams can benchmark and prove the value of their security program against peers and measurable outcomes. Outcomes Navigator translates raw security data into business-relevant insights to demonstrate progress against the most strategic use cases, MITRE ATT&CK TTPs, and compliance initiatives. Together, user and entity behavior analytics (UEBA), Agent Behavior Analytics (ABA), and agent-powered automated TDIR workflows help security operations teams detect insider risk earlier, investigate faster, and respond with greater precision. The New-Scale Platform gives organizations a practical way to manage insider threats tied to people and agents, accelerate security operations, and prove security impact over time. **Average Rating:** 4.6/5.0 **Total Reviews:** 14 #### How Do G2 Users Rate Exabeam New-Scale Platform? - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.0/10) - **Ease of Use:** 9.2/10 (Category avg: 8.7/10) - **Continuous Analysis:** 9.4/10 (Category avg: 8.9/10) - **Anomaly Detection:** 9.4/10 (Category avg: 8.9/10) #### Who Is the Company Behind Exabeam New-Scale Platform? - **Seller:** [Exabeam](https://www.g2.com/sellers/exabeam) - **Company Website:** www.exabeam.com - **Year Founded:** 2013 - **HQ Location:** Broomfield, CO - **Twitter:** @exabeam 5,374 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8269dcd878e7968524f3962a9164ef59bc027b3288cea78560785eb6feaa457e&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fexabeam&secure%5Burl_type%5D=linkedin_company_website) 793 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 57% Large, 29% Medium #### What Do G2 Reviewers Say About Exabeam New-Scale Platform? _AI-generated summary from verified user reviews_ ##### Pros - Users appreciate the **ease of use** of Exabeam New-Scale Platform, enhancing integration and streamlining security processes. - Users value the **high detection accuracy** of Exabeam New-Scale Platform, enhancing threat identification and response efficiency. - Users value the **granular integration and robust features** of Exabeam's New-Scale Platform, enhancing security and visibility. - Users value the **world-class security features** of Exabeam New-Scale Platform, ensuring clarity and reliability in monitoring. - Users appreciate the **automation capabilities** of Exabeam New-Scale Platform, enhancing response efficiency and reducing manual effort. ##### Cons - Users find the **complexity** of Exabeam's platform challenging, making setup and management more difficult. - Users often find the **complex setup** of Exabeam New-Scale Platform challenging, requiring expertise and manual configurations. - Users find the **difficult setup** of Exabeam New-Scale Platform to be complex, requiring significant expertise to manage effectively. - Users find **parsing issues** in Exabeam New-Scale Platform hinder usability and complicate data management efforts. - Users find the **software complexity** can be challenging, requiring significant expertise for effective management and setup. #### What Are Recent G2 Reviews of Exabeam New-Scale Platform? **["Gives Security Teams Their Time Back with Smart Threat Visibility"](https://www.g2.com/survey_responses/exabeam-new-scale-platform-review-9889355)** **Rating:** 4.5/5.0 stars _— Verified User in Computer Software_ [Read full review](https://www.g2.com/survey_responses/exabeam-new-scale-platform-review-9889355) **["The perfect SIEM"](https://www.g2.com/survey_responses/exabeam-new-scale-platform-review-10644742)** **Rating:** 5.0/5.0 stars _— Jorge T._ [Read full review](https://www.g2.com/survey_responses/exabeam-new-scale-platform-review-10644742) #### What Are G2 Users Discussing About Exabeam New-Scale Platform? - [What are the components of SIEM?](https://www.g2.com/discussions/what-are-the-components-of-siem) - 1 comment - [What are three characteristics of SIEM?](https://www.g2.com/discussions/what-are-three-characteristics-of-siem) - 1 comment ### [Securonix Security Operations and Analytics Platform](https://www.g2.com/products/securonix-security-operations-and-analytics-platform/reviews) Securonix is working to radically transform all areas of data security with actionable security intelligence. **Average Rating:** 4.0/5.0 **Total Reviews:** 14 #### How Do G2 Users Rate Securonix Security Operations and Analytics Platform? - **Has the product been a good partner in doing business?:** 7.7/10 (Category avg: 9.0/10) - **Ease of Use:** 8.7/10 (Category avg: 8.7/10) - **Continuous Analysis:** 10.0/10 (Category avg: 8.9/10) - **Anomaly Detection:** 9.4/10 (Category avg: 8.9/10) #### Who Is the Company Behind Securonix Security Operations and Analytics Platform? - **Seller:** [Securonix](https://www.g2.com/sellers/securonix) - **Year Founded:** 2008 - **HQ Location:** Addison, US - **Twitter:** @Securonix 4,275 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=a175a774faa00dbb9e5e2c2d28668c9b7bc21d93ffd9a220702c3e0ffc8c30e1&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F759889&secure%5Burl_type%5D=linkedin_company_website) 667 employees on LinkedIn® #### Who Uses This Product? - **Top Industries:** Information Technology and Services - **Company Size:** 50% Large, 36% Small #### What Do G2 Reviewers Say About Securonix Security Operations and Analytics Platform? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **efficient alert correlation** of Securonix, making analysis straightforward and minimizing false positives. - Users value the **automatic correlation of alerts** in Securonix, enhancing analysis and minimizing false positives. - Users value the **automatically correlated alerts** which enhance analysis and minimize false positives effectively. - Users value the **pre-correlated alerts** , which enhance analysis, minimize false positives, and simplify alert management. - Users appreciate the **ease of alert analysis** with Securonix, highlighting its effective correlation and reduced false positives. ##### Cons - Users find the **complex setup** of Securonix challenging, especially with difficult integration and troubleshooting errors. - Users struggle with **information deficiency** in Securonix, finding analysis and troubleshooting challenging. - Users find the **insufficient detail** in Securonix limits their analysis and complicates troubleshooting integration errors. - Users face **integration challenges** with Securonix, complicating analysis and troubleshooting processes significantly. - Users find the **limited features** of Securonix hindered their analysis and troubleshooting capabilities. #### What Are Recent G2 Reviews of Securonix Security Operations and Analytics Platform? **["Modern SIEM Tool with good features and Support"](https://www.g2.com/survey_responses/securonix-security-operations-and-analytics-platform-review-9514109)** **Rating:** 5.0/5.0 stars _— Pritam M._ [Read full review](https://www.g2.com/survey_responses/securonix-security-operations-and-analytics-platform-review-9514109) **["Correlated Alerts Made Easy, with Fewer False Positives"](https://www.g2.com/survey_responses/securonix-security-operations-and-analytics-platform-review-12366950)** **Rating:** 5.0/5.0 stars _— Saikumar M._ [Read full review](https://www.g2.com/survey_responses/securonix-security-operations-and-analytics-platform-review-12366950) #### What Are G2 Users Discussing About Securonix Security Operations and Analytics Platform? - [What is Securonix Security Operations and Analytics Platform used for?](https://www.g2.com/discussions/what-is-securonix-security-operations-and-analytics-platform-used-for) - 1 comment, 1 upvote - ‹ Prev‹ Prev - 1 - [2](/categories/user-and-entity-behavior-analytics-ueba?open_modal_url=%2Fproducts%2Fnetwrix-threat-manager%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fuser-and-entity-behavior-analytics-ueba%26source%3Dcategory&order=g2_score&page=2#product-list) - [3](/categories/user-and-entity-behavior-analytics-ueba?open_modal_url=%2Fproducts%2Fnetwrix-threat-manager%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fuser-and-entity-behavior-analytics-ueba%26source%3Dcategory&order=g2_score&page=3#product-list) - [4](/categories/user-and-entity-behavior-analytics-ueba?open_modal_url=%2Fproducts%2Fnetwrix-threat-manager%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fuser-and-entity-behavior-analytics-ueba%26source%3Dcategory&order=g2_score&page=4#product-list) - [Next ›Next ›](/categories/user-and-entity-behavior-analytics-ueba?open_modal_url=%2Fproducts%2Fnetwrix-threat-manager%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fuser-and-entity-behavior-analytics-ueba%26source%3Dcategory&order=g2_score&page=2#product-list) Spotlight Categories [Field Service Management Software](https://www.g2.com/categories/field-service-management) [Live Chat Software](https://www.g2.com/categories/live-chat) [Social Media Listening Tools](https://www.g2.com/categories/social-media-listening-tools) [Digital Signage Software](https://www.g2.com/categories/digital-signage) [Generative AI Infrastructure Software](https://www.g2.com/categories/generative-ai-infrastructure) Similar Categories - [Identity Threat Detection and Response (ITDR)](/categories/identity-threat-detection-and-response-itdr) - [Insider Threat Management (ITM)](/categories/insider-threat-management-itm) [Browse User and Entity Behavior Analytics (UEBA) Themes](/categories/user-and-entity-behavior-analytics-ueba/themes) ![Brandon Summers-Miller](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Brandon Summers-Miller") BS Researched and written by [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller) Updated October 3, 2024 User and entity behavior analytics (UEBA) software is a family of tools used to develop and model baseline behaviors for people and hardware within a network, with the ultimate goal of identifying abnormalities and alerting security staff. These tools leverage machine learning to identify patterns and monitor user or machine behaviors, notifying stakeholders of abnormal activity, malicious behavior, or performance issues that arise from mistakes or improper operational actions. Companies use UEBA technology to protect their sensitive information and business critical systems from both external and insider threats. These may be employees or partners that partake in nefarious activities such as stealing data, adjusting privileges, or violating company policies. UEBA solutions can also detect compromised accounts that may have resulted from weak passwords or phishing scams that provide network access to unapproved parties. UEBA can uncover a number of external threat types as well; most notably, brute force attacks and privilege escalation. UEBA functions on a similar basis as [risk-based authentication (RBA) software](https://www.g2.com/categories/risk-based-authentication) and [zero trust networking software](https://www.g2.com/categories/zero-trust-networking). Both of these tools use machine learning to evaluate risk and identify threat actors, but neither is designed to constantly monitor user behavior within a specific network. RBA takes into account variables such as historic access, location, and IP address to determine risk when authenticating. Zero trust network architectures are designed segment networks and monitor network activity. If threats are detected, a segment of the network or an individual endpoint will be restricted from network access. To qualify for inclusion in the User and Entity Behavior Analytics (UEBA) category, a product must: - Use machine learning to develop baseline behaviors for individual users and resources within a network - Monitor the users and resources with a network for insider threats and other anomalies - Provide incident details and remediation workflows, or integrate with incident response solutions - Integrate with existing security systems to enforce policies and develop automated incident management processes Top Tools at a Glance | | Behavioral threat detection with AI-driven endpoint telemetry | User Review "Crowdstrike Falcon: Proactive Security, Steep Learning Curve" | | | Behavioral threat detection with automated data remediation | User Review "The best experience with Varonis Data Security Platform" | | | Insider threat detection with behavioral policy enforcement | User Review "Teramind Delivers Clear Workforce Visibility with Outstanding Support" | | | Insider-risk visibility with endpoint behavior analytics | User Review "Effective DLP with Dashboard Insights, Needs Better Support" | | | Automated UEBA with autonomous breach remediation | User Review "Effective Built-In Protection with Straightforward Management" | | | Active Directory behavior auditing and compliance reporting | User Review "Easy Setup, Powerful Reporting, and Great Value" | | | AI-driven alert triage and SOC consolidation | User Review "Palo Alto Cortex XSIAM: Centralized Security with Powerful AI Automation" | | | SOC-ready UEBA with offense-driven correlation | User Review "QRADAR Integrates Easily and Makes Logs & Alerts Report-Ready" | | | Active Directory identity threat detection and investigation | User Review "Powerful Security with Seamless Integration" | | | Unified UEBA with asset-based log detection | User Review "Intuitive, High-Performance SIEM with Great Support and Cost-Effective Value" | * * * Show More