We've been using Panther for nearly two years, and it's been a fantastic experience. Their commercial team has been consistently fair and transparent, which made the onboarding process smooth and the long-term relationship easy to manage.

Support-wise, Panther has been exceptional — fast, knowledgeable, and genuinely helpful whenever we’ve needed them. What’s impressed us most, though, is the platform’s rapid evolution. Since we joined, Panther has rolled out a steady stream of valuable features and native integrations, showing their strong commitment to innovation and customer needs.

Panther has become a key part of our security stack, and we’re excited to see how the platform continues to grow. Review collected by and hosted on G2.com.

We work with external consultants who are more familiar with traditional SIEM platforms, so there was a brief adjustment period for them when adapting to Panther’s approach. That said, once they understood the architecture and workflows, things went smoothly. Beyond that, there's very little to dislike — Panther has consistently delivered on both functionality and support. Review collected by and hosted on G2.com.

Panther's new AI is a massive time-saver, it instantly pulls the right fields from complex JSON logs. The AI saves me time parsing JSON and more time for responding. The Python-based alerting is a major win too. Writing detection logic feels like proper software development: it's clean, flexible, and testable. The alert testing feature is especially powerful. No more guessing if your logic will work in production. Custom lookup tables to map things like GitHub usernames to employees, or AWS accounts to Terraform workspace, which adds powerful context to our alerts. Implementation and integration was fast and straightforward, easy to add custom features. Their customer support is exceptional — they added a feature the very next day after our request. We use Panther every single day across the team to save hours vs. our old SIEM. Review collected by and hosted on G2.com.

The core platform is strong, but a few things could be smoother. Some UI elements still feel a bit early-stage./ More out-of-the-box templates or integration options would really level up the experience. Review collected by and hosted on G2.com.

I like many features from Panther, one of the best thing for me is always coming with new improvements that align where the market is pointing out. Also, they are always listening to their customers that provides feedbacks and work as a team to provide a solution. Review collected by and hosted on G2.com.

Fully managing Panther in the long run can bring some operational work regarding updates and upgrades for their detections and the CI/CD pipeline. Those tasks requires more time and experience from teams outside SecOps. Review collected by and hosted on G2.com.

Ease of use and value for money. Excellent customer support and engagement team. Review collected by and hosted on G2.com.

Lack of comprehensive, out of the box, dashboards that focus on security leadership. Additionally, a lack of internal RBAC to create silos of access based on audit log source. Review collected by and hosted on G2.com.

I personally think panther is well architectured SIEM that has a enormous potential to growth in various aspect such as volume increases and very flexible architecture for writing detecting rules, especially geared us many tools to help e do detection engieering Review collected by and hosted on G2.com.

Panther also has some latencies, each often ignored in other SIEM solutions.

I personally love how panther shows their latencies in plain sight, and make us understand whats happening under detections. I did managed other SIEMs, but these are the first one that has tranaparencies in detection processes. Review collected by and hosted on G2.com.

Panther works closely with customers to resolve issues efficiently and deliver agile solutions tailored to their needs. Review collected by and hosted on G2.com.

Panther would benefit from having additional custom script–based log collectors to improve flexibility and coverage. Review collected by and hosted on G2.com.

Panther's user interface is very intuitive, making navigation effortless even for new users. The documentation is both comprehensive and well-written, providing clear guidance throughout. Writing detecting rules in Panther is easy, and Panther provides a robust environment to test the rules. Review collected by and hosted on G2.com.

It's a little tricky to manage the version of the detection rules. The "packs" and "helpers" lack individual version control. This can be workaround by using the CI/CD workflow, but on Panther UI it's not straightforward. Review collected by and hosted on G2.com.

Writing detections in Python is super nice.

Being able to throw an indicator such as an IP address or username into Panther and having it search everywhere is convenient. Review collected by and hosted on G2.com.

When we make customizations to detection rules, it often causes merge conflicts when syncing from the upstream panther-analysis repo.

Custom SQL queries are often slow (on the order of 10 minutes). Review collected by and hosted on G2.com.

One of the things I like most about Panther is it's Python based detection rules. It easy to start with simple rule writing, but moving to writing more complex rules using Python is a breeze. Review collected by and hosted on G2.com.

As someone responsible for triaging alerts, I’ve found the UI a bit cumbersome—it’s missing some key quality-of-life features that would streamline triaging alerts. Integrating it with automation systems could unlock a lot of value to ease some of this. Review collected by and hosted on G2.com.

Panther is easily implemented with many integrations to different services available. Review collected by and hosted on G2.com.

Can require some work to configure alerts to better the signal/noise ratio. Updates to detection packs often contain new alerts which need configuring. Review collected by and hosted on G2.com.