SolarWinds CISO: Justin Henkel

What the company sells

SolarWinds sells monitoring, observability and service management capabilities on a platform offered in self-hosted and SaaS deployment models. Customers running self-hosted Orion modules on version 2022.2 or later are using the SolarWinds Platform. The Orion Platform was an infrastructure monitoring and management platform restricted to self-hosted deployment. Through Platform Connect, SolarWinds Observability, the SaaS-delivered observability solution, can consume data from self-hosted Hybrid Cloud Observability. SolarWinds offers a choice of self-hosted, SaaS or hybrid deployment.

SolarWinds Observability SaaS is an observability solution built to connect data from web applications, their services, and cloud and hybrid infrastructures. The application performance monitoring solution collects metrics, logs, traces and user experience data. AIOps capabilities are part of SolarWinds Service Desk, SolarWinds Observability Self-Hosted and SaaS. Self-hosted observability can be deployed behind a firewall or self-hosted in AWS, Microsoft Azure or GCP. SolarWinds AI works across the portfolio to deliver intelligence, automation and optimization. Root Cause Assist provides users with context and concrete starting points for investigating and resolving issues. Alert clustering groups related alerts and identifies common root causes. Customer data submitted to SolarWinds AI features is not used to train or fine-tune underlying third-party foundation models.

Avior is built on the SolarWinds platform. Users set goals and guardrails for Avior, which carries out work while the team governs the outcome. Avior can take action to reduce alert noise, close compliance gaps, automate backups and remediate config drift. SolarWinds ingests alerts and tickets from SolarWinds Observability, Service Desk and 200+ third-party tools and correlates them into one incident.

SolarWinds Security Event Manager is an on-premise SIEM tool built with threat feeds designed to automatically detect and respond to user, application and network threats. Security Event Manager comes with hundreds of pre-built connectors that gather logs from various sources, parse their data and put it into a common readable format. SEM has hundreds of built-in correlation rules that watch the network and piece together data from the various log sources to identify potential threats in real time. Security Event Manager can automate responses when correlation rules are triggered, including blocking IPs, changing privileges, disabling accounts, blocking USB devices and killing applications. Security Event Manager has built-in File Integrity Monitoring capabilities to monitor and alert on suspicious or potentially malicious activity in sensitive files. Security Event Manager includes a built-in USB defender for file and USB activity. SEM provides hundreds of out-of-the-box reports for HIPAA, PCI DSS, SOX, ISO, DISA STIGs, FISMA, FERPA, NERC CIP, GLBA, GPG13 and more. SolarWinds sells Server & Application Monitor, Web Performance Monitor, Security Event Manager, Patch Manager and Access Rights Manager.

SolarWinds Service Desk brings incident management, service request management, ticket routing, approvals, agentic AI and SLA management together in one workspace. SolarWinds Service Desk software connects IT asset management with configuration management. SolarWinds Service Desk centralizes the information teams use to manage IT assets across their lifecycle. SolarWinds Service Desk tracks hardware, software, licenses, contracts, vendors, warranties, assigned users, locations and related ticket history. SolarWinds Service Desk includes a service portal, service catalog, knowledge base and Virtual Agent capabilities. SolarWinds Service Desk supports ITIL-aligned incident, workflow automation, problem, change and release management practices with configurable workflows. SolarWinds AI generates a short summary of the comments and communication on a ticket. The Service Desk AI virtual agent can answer user questions and support troubleshooting. Relevant infrastructure alerts can be turned into Service Desk tickets. SolarWinds Service Desk can be used across the entire organization as an enterprise service management solution.

SolarWinds sells Network Performance Monitor, NetFlow Traffic Analyzer, IP Address Manager, Network Configuration Manager, Log Analyzer, Virtualization Manager and Storage Resource Monitor. NetPath is used to visualize critical network paths. SolarWinds offers monitoring for the performance of applications running in DigitalOcean Droplets. The SolarWinds Deployment Service program is valid for 60 days from purchase, with the option to extend. Deployment packages are offered for lite (up to 5 hours), small (DS Level 1, up to 30 hours), medium (DS Level 2, up to 75 hours) and large deployments (DS Level 3, up to 125 hours). SolarWinds Certified Service Providers deliver partner-led professional services and premium support add-ons in EMEA, APJ, LATAM and North America. Federal deployment work is delivered by U.S.-citizen engineers with security clearances and complies with federal and defense regulations.

SolarWinds holds ISO/IEC 27001:2022 certification for the information security management system supporting development, maintenance, operations and support of its products and services. SolarWinds shares compliance reports such as SOC 2 and ISO 27001 upon request. SolarWinds conducts regular external penetration tests using independent, accredited third-party firms. SolarWinds follows U.S. federal guidelines for secure software development described in the National Institute of Standards & Technology Secure Software Development Framework (SSDF). The federal government is a customer of SolarWinds.^{[1][3][5][6][7][8][9][10][11][12][13]}

Categories

• Network visibility and traffic brokering (primary category)
• SIEM
• Compare SolarWinds with companies in the same categoryside by side

Headquarters

Not established from our sources

Founded

Not established from our sources

Ownership

Not established from our sources

CISO on record

Justin Henkel, Chief Information Security Officer (appointment announced on June 17, 2026)

Website

solarwinds.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Security Event Manager^[1]

  An on-premise SIEM tool built with threat feeds designed to automatically detect and respond to user, application and network threats.

  Security Event Manager comes with hundreds of pre-built connectors that gather logs from various sources, parse their data and put it into a common readable format. Security Event Manager has built-in File Integrity Monitoring capabilities to monitor and alert on suspicious or potentially malicious activity in sensitive files. Active Response provides preconfigured, customizable actions for incident response based on which trigger conditions are satisfied. SEM provides hundreds of out-of-the-box reports for HIPAA, PCI DSS, SOX, ISO, DISA STIGs, FISMA, FERPA, NERC CIP, GLBA, GPG13 and more.

• SolarWinds Observability SaaS^[6]

  Observability delivered as SaaS, built to connect data from web applications, their services, and cloud and hybrid infrastructures.

  The application performance monitoring solution collects metrics, logs, traces and user experience data. It is extensible with an open-source framework, a public API and out-of-the-box third-party integrations. Through Platform Connect, SolarWinds Observability, the SaaS-delivered observability solution, can consume data from self-hosted Hybrid Cloud Observability.

• SolarWinds Observability Self-Hosted

  Self-hosted observability that can be deployed behind a firewall or self-hosted in AWS, Microsoft Azure or GCP.

  AIOps capabilities are part of SolarWinds Service Desk, SolarWinds Observability Self-Hosted and SaaS. Customers running self-hosted Orion modules on version 2022.2 or later are using the SolarWinds Platform. Self-hosted Hybrid Cloud Observability data can be consumed by SolarWinds Observability through Platform Connect.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of SolarWinds's categories, then alphabetical. A list from the record, never a ranking.

• On network visibility and traffic brokering, SolarWinds competes with Gigamon, NEOX NETWORKS, Network Critical, Blackwall, Corelight, ExtraHop, FireMon, Illumio and NETSCOUT.

• On siem, SolarWinds competes with Alphabet, Elastic, Exabeam, Graylog, Guardsix, Gurucul, Hunters, RunReveal, Securonix, Splunk and 22 more.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · 4.4 out of 5 · 880 reviews^[4]seen November 10, 2026

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]Security Event Manager - View Event Logs Remotely | SolarWindsSolarWinds · undated page, accessed October 14, 2026 · Tier A: the company, a regulator or a filing
2. [2]SolarWinds productsSolarWinds · undated page, accessed November 2, 2026 · Tier A: the company, a regulator or a filing
3. [3]Observability, Database, and IT Service Management | SolarWindsSolarWinds · undated page, accessed November 2, 2026 · Tier A: the company, a regulator or a filing
4. [4]SolarWinds Observability Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed November 2, 2026 · Tier C
5. [5]Orion Platform now self-hosted on the SolarWinds Platform | SolarWindsSolarWinds · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
6. [6]Application Performance Monitoring | SolarWindsSolarWinds · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]AIOps Solutions & AI-Powered IT Operations | SolarWindsSolarWinds · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]Security Resources | SolarWindsSolarWinds · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]Deployment Services | Customer SuccessSolarWinds · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
10. [10]IT Service Management Software Solutions | SolarWindsSolarWinds · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
11. [11]IT Asset Management Solutions | SolarWindsSolarWinds · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
12. [12]SolarWinds SolutionsSolarWinds · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
13. [13]IT Service Desk Software | SolarWindsSolarWinds · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing

Last verified October 14, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded October 14, 2026, expanded November 10, 2026 from the references above.

Work for SolarWinds? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.