Panther is incredibly responsive - it's a definite partnership. The team continues to develop features with input from customers about what is most needed. The ability to write detections in Python is very helpful. New feature rollouts make creating detections and doing searches more accessible to less technical employees. The ability to truly implement detection as code is really cool, but it's not a must to implement Panther. The flexibility of ingesting anything you can get to S3 introduces some up front work, but once a process is established, custom ingestions can be done quickly. Review collected by and hosted on G2.com.

Panther lacks some functionality you expect from the typical SIEM - visualizations specifically lag, but this can be addressed with other tools. There is a fairly steep learning curve if you are not experienced with Python, SQL, and YAML. However, all SIEMs have a fairly steep learning curve. If your team has some experience with development, the languages should be familiar and easy to get the hang of how Panther uses them. Review collected by and hosted on G2.com.

The ability for our detections to be as simple or complex as Python allows is the most significant benefit to Panther as a SIEM. While specific log sources don't necessarily need this, custom log sources (such as an organization's app logs) benefit tremendously from this added flexibility. Panther helps foster collaboration in our environment and provides a tool to which all of Engineering can contribute. The ability to embed our alert building into our existing SDLC to ensure proper custody and approvals before going into production is tremendous. As a partner, Panther is transparent and always provides constant opportunities for feedback and service improvement. The community is growing faster everyday and there are always new alerts being offered for adoption by all of the community. Review collected by and hosted on G2.com.

While it doesn't impact our team, a non-technical Security team could struggle to realize all of the benefits of a SIEM like Panther vs some of the drag-and-drop competitors. Review collected by and hosted on G2.com.

Panther is a clear winner for ease of deployment and usability. Their support and customer-success team is very communicative and eager to help. No coding is necessary to integrate the data sources we needed in our tech stack.It has out-of-the-box detections which are immensely useful when you have a very small IT/Infosec Team. The notification setup and Slack integration are seamless. I also love the How-To's for integrations and notifications , which are very well-written Review collected by and hosted on G2.com.

The only improvement I wanted when I started using panther in 2021 was to have assignment for the alerts so that I know who is working on the issue. The Customer Success & Product Team took our feedback & got this rolled out. Now I am happy & there isnt anything I dislike about Panther Review collected by and hosted on G2.com.

We enable one-way alert synchronization between the Panther console and our incident management platform to generate real-time notifications & updates. Pulling MongoDB and AWS DynamoDB logs is done seamlessly through Panther APIs. To improve detection match rates, we use its Data Replay processing to get transparency about event triggers. Review collected by and hosted on G2.com.

Updation in CloudFormation deployment parameters is required in Panther's backend framework. This will help us to orchestrate our infrastructure monitoring better and reorganize our rules, queries and customer policies. All other features for custom detection, log analysis, and notification is excellent with Panther. Review collected by and hosted on G2.com.

Modern, cloud-based architecture. Bring your own Snowflake. Detection as Code (Python & SQL). Review collected by and hosted on G2.com.

Response workflow creation (what to do with a detection) is lackluster and underdeveloped. Review collected by and hosted on G2.com.

Overall a very positive experience. It was very easy to deploy and the how-to's and guides throughout were really helpful to help guide and integrate through the new security system. Review collected by and hosted on G2.com.

I feel that there's too much coding needed if you want to fine tuning inclusion and exclusion criteria. These can use more automation and promote more user-friendliness. Review collected by and hosted on G2.com.

Panther handles high-volume cloud security log streaming. We tested its capacity to process data from various cloud services and found that it worked fine with AWS, OKTA, and G Suite. The product's out-of-the-box alerts and detections were helpful. Panther is built on Snowflake, which helped us quickly make a backend data warehouse. Panther is a scalable SIEM, enabling us to write detection definitions as code and then automatically push those definitions to our Panther deployment. It is a powerful detections-as-code feature that can make a private copy of this repository to manage custom detections. The back end scales as needed, so we no longer manage servers, load balancers, and other infrastructure for our old SIEM. Review collected by and hosted on G2.com.

The number of customers is still pretty small, and we'd like to have a bigger group of customers with whom we could share ideas. Since detection as code is new, we'd love an online community or user group to exchange rulesets and discuss best practices. Panther has few native integrations, and ingesting data from some sources can be difficult. It also needs more integrations, finer exclusions and allowlists, and resolution/status options in case management. Review collected by and hosted on G2.com.

They made the language and the coding simple. They also took our challenges of traditional SIEM away. Review collected by and hosted on G2.com.

It was a bit tough to use but that was to be expected. Review collected by and hosted on G2.com.

Having the scalability and flexibility to create an overall positive user experience Review collected by and hosted on G2.com.

The UI is not optimal for my workflow. Having to switch between tabs can be cumbersome Review collected by and hosted on G2.com.

Log monitoring with Panther is like childs play. I havnt seen any other log monitoring tool with such an ease of use. Review collected by and hosted on G2.com.

Nothing so far that i have encountered with this tool Review collected by and hosted on G2.com.