The team developing and supporting the tool is great. They are accommodating and responsive and always take the time to listen to concerns, feature requests or queries. The tool is easy to deploy and has a very short runway to start delivering valuable results and insights. Fluency is very accommodating with custom rules and integrations. They have, on several occasions, written new code for us for niche products and use cases.

To me, Fluency's two most likable features would be the machine learning behind the Event Watch and the Fluency Processing Language (FPL). Being able to write behaviors for Fluency's machine learning opens the door to a wide range of detections that aren't possible in non-ML tools without spending large amounts of time weeding out false positives and outliers. The addition of FPL greatly expanded what was possible with Fluency by allowing analysts and investigators to translate their thought and work processes into scripts that Fluency could execute itself. These scripts are a natural knowledge transfer process for organizations to retain analysts' knowledge as they transition to other organizations. It is an invaluable feature.

The reporting in Fluency is good - they are responsive to feedback - but let's face it - there are a lot of other good SIEMs with good reporting. What makes Fluency standout is the communication that you have with your rep - you do not have to wait days or hours to get an answer, or to get more insight on an issue if that is what you need