G2

Richard E.

Security Engineer

Enterprise (> 1000 emp.)

6/4/2026

"Panther’s SIEM + AI Makes Triage and Threat Hunting Fast and Seamless"

5/5

What do you like best about Panther?

Panther’s SIEM iteration into the AI security space has been a real shift in our security team’s capabilities. With AI Auto Triage, the triage process is quick, and the Panther AI integration enables automated threat hunting. Having threat intel pushed into the MCPs has also been helpful.

The price-to-capability balance feels fair, and it’s the only SIEM I’ve seen so far that has pushed this heavily into SIEM + AI integration. The standard plug-and-play integrations are limited to a typical security tech stack; however, it isn’t difficult to ship logs to S3 and normalize them directly in Panther.

Using a Snowflake datalake, queries are efficient and it’s one of the more seamless ways I’ve used to query log sources at scale. We also have monthly visits with the Panther team to help integrate and upgrade our instances, uncover new release items, and help us engineer the platform for success.

Lastly, the UI/UX is easy to navigate. Most SIEMs are difficult to work with, with buttons doing various things across different areas. This is a SIEM through and through: if you know what you want to find or what detection you want to build, you can do it easily since the backend query structure is SQL and the detections are all detection as code. Review collected by and hosted on G2.com.

What do you dislike about Panther?

The hardest part of working with Panther is making sure you manage your detections as code in a solid, maintainable way. It’s easy for your implementation to drift and become out of date compared with the upstream managed Panther repo. Before you start implementing rules and creating your own detections, it’s really important to think through the upstream conflicts that can come up when you customize things. If you account for that upfront while designing your detection-as-code infrastructure, you shouldn’t run into major problems. Review collected by and hosted on G2.com.

What problems is Panther solving and how is that benefiting you?

Panther is really moving forward with its AI capabilities. The Panther AI Auto Triage feature has helped us go from triaging hundreds of alerts to focusing only on the important ones. While other companies are adding built-on features to enable AI auto-triage in combination with your SIEM, Panther has this functionality built in, and it works great.

On top of that, they’re taking it a step further by working toward AI that can create new detections directly within the platform. It can also help identify areas with high false positives so we can reduce the noise our analysts deal with, including by suggesting updates to detections that cut down on unnecessary alerts. Review collected by and hosted on G2.com.