RunReveal Reviews & Product Details

The team at RunReveal fundamentally understands the challenges with security logging, detections, and response. Security teams shouldn't need dedicated SIEM engineers to get logs ingested and detections written. You shouldn't need 6 different products just to alert on security issues.

RunReveal solves all of these problems. They have the most powerful MCP out there. They don't gatekeep any features in their API. You can use RunReveal however you wish. They respond to feature requests and are constantly improving.

They understand how code-first security teams operate. We have absolutely transformed how we do detection and response and it was only possible because of RunReveal.

Features we like:

- The MCP - It is worth getting RunReveal just for this. No other security team comes close

- The API - We can do everything via the API

- Built in logging pipelines

- AI native features to write and improve queires and detections

- The investigation feature that lets us consolidate queries during an alert investigation

- Support for detection-as-code. The RunReveal team gets it. Detection rules are just code. They should be in a repo. RunReveal supported this from the beginning

We now compare every other security tool to see if they can match the capabilities, features, and team at RunReveal Review collected by and hosted on G2.com.

Nothing. There is not a single thing I dislike about the product. They respond to feature requests and are tracked. So when we have an issue or we need a feature built, its tracked and I can see its progress. The customer feels part of the dev lifecycle. We are comfortable asking for anything. They are only getting better. Review collected by and hosted on G2.com.

RunReveal genuinely impressed me. It provides the kind of high-signal visibility I expect from serious security tooling: fast, focused, and free of the usual noise. The detections feel thoughtfully engineered rather than bolted on, and the overall experience suggests a deep understanding of how security teams actually work day to day. It doesn’t just aggregate data; it helps you reason about what matters and make sense of what you’re seeing. Tools that truly amplify a security team are rare, and RunReveal absolutely does. Review collected by and hosted on G2.com.

Honestly, nothing meaningful. The product feels thoughtfully designed and mature in the areas that matter. If anything, I’m just excited to see how it continues to evolve but I don’t have specific complaints. Review collected by and hosted on G2.com.

They’re fast and responsive when you request new data sources, especially if you run into a rarely used product they don’t already have a source for. Pricing is great, the UI is clean, and it’s easy to find what you’re looking for. With the help of various AI models, investigations feel like a trivial endeavor. On the model side, they fully support the major providers, and you can run your own Bedrock models or just use their Bedrock models. The founders all come from a security-focused background, and they’ve built a simple product that addresses the limitations of other bloated SIEMs. Adding sources is easy and intuitive, and for the ones that require a little extra care and feeding, the documentation is there. Review collected by and hosted on G2.com.

Anything I have disliked about RunReveal has been quickly addressed after providing feedback. If anything, I dislike that I don't have more reason to spend time using the site. Review collected by and hosted on G2.com.

It's built by folks who understand the security analytics problem space. Engineered to solve real problems and supported by passionate employees. To call out 1 such feature, RunReveal's MCP server has been an absolute game changer, enabling large scale investigations, detection development, and audit capabilities at a pace I've never experienced before. Review collected by and hosted on G2.com.

Shipping with out-of-the-box materialized views for common ingestion sources would improve performance for high volume tables Review collected by and hosted on G2.com.

First is that RunReveal can store all your data so much more efficiently than splunk so we have more data in our SIM for analysis. A close follow up to that is their incredible in integrations with AI to not only make investigations easier, but also automated. Review collected by and hosted on G2.com.

They may not have every feature however, if you need something, their turnaround time is amazing as they are incredibly agile and super great to work with. Review collected by and hosted on G2.com.

RunReveal is extremely simple to configure and use on a day-to-day basis compared to its peers. Streamlined log ingestion and thoughtful AI implementation allows me to focus my time on hunting threats and moving the security needle in a meaningful way. Review collected by and hosted on G2.com.

It's so good, I only dislike that some of the features are locked behind a paywall in their free version so I can't use it to the fullest in my homelab! Review collected by and hosted on G2.com.