Securonix UEBA

Securonix UEBA

Securonix
+
+

Related Products

  • Graylog
    440 Ratings
    Visit Website
  • ManageEngine Log360
    196 Ratings
    Visit Website
  • Blumira
    150 Ratings
    Visit Website
  • ManageEngine EventLog Analyzer
    211 Ratings
    Visit Website
  • AdRem NetCrunch
    165 Ratings
    Visit Website
  • Grafana Cloud
    860 Ratings
    Visit Website
  • Cloudflare
    2,048 Ratings
    Visit Website
  • Bitdefender Ultimate Small Business Security
    5 Ratings
    Visit Website
  • ManageEngine Endpoint Central
    3,347 Ratings
    Visit Website
  • New Relic
    2,941 Ratings
    Visit Website

About

Get a simple and fast security analytics implementation, along with a user-friendly interface that can be integrated with an entire IT infrastructure with LogPoint. LogPoint’s modern SIEM with UEBA provides advanced analytics and ML-driven automation capabilities that enable their customers to securely build-, manage, and effectively transform their businesses.They have a flat licensing model, based on nodes rather than data volume. This helps to reduce the cost of deploying a SIEM solution on-premise, in the cloud or even as an MSSP. The solution integrates easily with all devices in your network, giving a holistic and correlated overview of events in your IT infrastructure. LogPoint’s Modern SIEM solution translates all data into one common language, making it possible to compare events across all systems. Having a common language makes it both very easy and efficient to search, analyze and report on data.

About

Today, many attacks are specifically built to evade traditional signature-based defenses, such as file hash matching and malicious domain lists. They use low and slow tactics, such as dormant or time triggered malware, to infiltrate their targets. The market is flooded with security products that claim to use advanced analytics or machine learning for better detection and response. The truth is that all analytics are not created equal. Securonix UEBA leverages sophisticated machine learning and behavior analytics to analyze and correlate interactions between users, systems, applications, IP addresses, and data. Light, nimble, and quick to deploy, Securonix UEBA detects advanced insider threats, cyber threats, fraud, cloud data compromise, and non-compliance. Built-in automated response playbooks and customizable case management workflows allow your security team to respond to threats quickly, accurately, and efficiently.

Platforms Supported

Windows Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

IT security teams searching for a powerful SIEM solution

Audience

IT security teams in need of a threat detection, response, remediation, and protection solution

Support

Phone Support Supported
24/7 Live Support Supported
Online Not Supported

Support

Phone Support Not Supported
24/7 Live Support Supported
Online Not Supported

API

Offers API Not Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

No information available.
Free Version Not Supported
Free Trial Supported

Pricing

No information available.
Free Version Not Supported
Free Trial Not Supported

Reviews/Ratings

Overall 5.0 / 5
ease 5.0 / 5
features 4.0 / 5
design 5.0 / 5
support 5.0 / 5

Reviews/Ratings

Overall 1.0 / 5
ease 2.0 / 5
features 2.0 / 5
design 1.0 / 5
support 1.0 / 5

Pros & Cons from Real Users

Pros

  • Ease of use and easy installation and customisation, no Linux or Unix knowhow needed, Excellent Support that also helps with how to questions, Supported Normalization of hundreds of log sources. Non programming SOAR with easy to use graphical workbook editor & very nice case management, Predefined and supported collectors and fetchers, Dashboards, Reports, Alert Rules etc.

Cons

  • If we must find something, user administration and rule based access is not always 100% transparent and might lead to duplicates.

Pros & Cons from Real Users

Pros

  • Nothing, out of the box rules often contain typos or only work for extremely limited use cases. This is a product that looks great at a glance but is garbage for UEBA/Insider Threat use when you start working with the details.

Cons

  • Securonix's product is rife with vulnerabilities and outdated components. Their support is extremely slow and is unable to troubleshoot basic problems. The application UI is difficult to use and maintain and is expensive for what it does.

Training

Documentation Supported
Webinars Supported
Live Online Not Supported
In Person Supported

Training

Documentation Not Supported
Webinars Supported
Live Online Not Supported
In Person Supported

Company Information

LogPoint
Founded: 2001
Denmark
www.logpoint.com

Company Information

Securonix
Founded: 2008
United States
www.securonix.com

Alternatives

Alternatives

EventSentry

EventSentry

NETIKUS.NET ltd
FortiInsight

FortiInsight

Fortinet

Categories

Categories

Application Performance Monitoring (APM) Features

Baseline Manager Not Supported
Diagnostic Tools Supported
Full Transaction Diagnostics Supported
Performance Control Supported
Resource Management Not Supported
Root-Cause Diagnosis Supported
Server Performance Supported
Trace Individual Transactions Supported

Computer Security Features

Anti Spam Not Supported
Antivirus Not Supported
Audit Trail Not Supported
Compliance Management Supported
Database Security Audit Supported
File Access Control Not Supported
Financial Data Protection Not Supported
Maintenance Scheduling Not Supported
Real Time Monitoring Supported
Security Event Log Supported
Virus Definition Update Not Supported
Vulnerability Protection Supported

SIEM Features

Application Security Supported
Behavioral Analytics Supported
Compliance Reporting Supported
Endpoint Management Supported
File Integrity Monitoring Supported
Forensic Analysis Supported
Log Management Supported
Network Monitoring Supported
Real Time Monitoring Supported
Threat Intelligence Supported
User Activity Monitoring Supported

Cybersecurity Features

AI / Machine Learning Supported
Behavioral Analytics Supported
Endpoint Management Not Supported
Incident Management Supported
IOC Verification Not Supported
Tokenization Not Supported
Vulnerability Scanning Not Supported
Whitelisting / Blacklisting Not Supported

Integrations

Recorded Future Supported
Airlock Supported
Box Not Supported
Carbon Black EDR Not Supported
Chronicle SOAR Supported
CyberArk Privileged Access Manager Not Supported
GoSecure Supported
NXLog Supported
Netskope Not Supported
Okta Not Supported
SOC Prime Platform Supported
Securonix Unified Defense SIEM Not Supported
ServiceNow Not Supported
Splunk Cloud Platform Not Supported
Tenable One Supported
ThreatConnect Risk Quantifier (RQ) Not Supported

Integrations

Recorded Future Supported
Airlock Not Supported
Box Supported
Carbon Black EDR Supported
Chronicle SOAR Not Supported
CyberArk Privileged Access Manager Supported
GoSecure Not Supported
NXLog Not Supported
Netskope Supported
Okta Supported
SOC Prime Platform Not Supported
Securonix Unified Defense SIEM Supported
ServiceNow Supported
Splunk Cloud Platform Supported
Tenable One Not Supported
ThreatConnect Risk Quantifier (RQ) Supported
Claim LogPoint and update features and information
Claim LogPoint and update features and information
Claim Securonix UEBA and update features and information
Claim Securonix UEBA and update features and information