CISO Tribune

Vendor comparison · 2 companies

Anomali vs Exabeam

Anomali is a cybersecurity platform that combines a unified security data lake, threat intelligence, and agentic AI for security operations. Exabeam sells security operations software for threat detection, investigation and response (TDIR), including cloud-native SIEM, behavioral analytics and an on-premises SIEM platform. CISO Tribune files both under AI SOC analysts. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Anomali
  • Exabeam
Anomali vs Exabeam: Products, Customers and Funding Compared
AnomaliAnomali is a cybersecurity platform that combines a unified security data lake, threat intelligence, and agentic AI for security operations.anomali.comExabeamExabeam sells security operations software for threat detection, investigation and response (TDIR), including cloud-native SIEM, behavioral analytics and an on-premises SIEM platform.exabeam.com
What it sells
  • Anomali IntegratorEnriches and automatically distributes threat intelligence across a security ecosystem.
  • New-Scale Fusion[1][5][9]A cloud-native platform combining New-Scale SIEM and New-Scale Analytics.
  • New-Scale SIEM[5][9]A cloud-native SIEM with search, correlation and AI co-investigation in a TDIR workbench.
  • Exabeam Nova[1][5][9]A platform-wide co-investigator for analysts.
  • Outcomes Navigator[5][9]Maps data to use cases and frameworks.
  • LogRhythm SIEM[5][11][12]An on-premises SIEM platform.
  • LogRhythm Intelligence[5][12]An add-on bringing behavioral analytics to LogRhythm SIEM.
  • NetMon[13]Network traffic monitoring for LogRhythm or New-Scale deployments.
Categories
Headquarters
Redwood City, United States[2]Foster City, United States[4]
Founded
Not stated on its pages2013[2]
Ownership and funding
Not stated on its pagesOwned by Thoma Bravo since 2024[5][7][8]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • May 5, 2026Anomali announced ThreatStream Next-Gen, available as a standalone intelligence solution and embedded within the Anomali Unified Security Data Lake.[2]
  • October 1, 2026Exabeam introduced new Agentic SOC capabilities that bring AI-driven investigation, execution, and governance to cloud and on-premises environments.[15]
  • July 1, 2026Exabeam expanded its Behavior Intelligence capabilities to help organizations secure AI agents, autonomous workflows, and human-to-agent interactions.[6]
  • June 23, 2026Exabeam introduced Agent Behavior Verification and released Praxen, an open-source tool that tests an AI agent against its intended role before deployment.[16]
G2 and Gartner Peer Insights
  • G2: listed, seen November 4, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen November 3, 2026[8]
Who it fits
From its own pages, Anomali sells mainly to enterprise security teams and public-sector organizations. Anomali says its 400+ enterprise customers span financial services, critical infrastructure, government, and national defense. Anomali also says its platform works alongside the SIEM, EDR, and SOC tools customers already own, and the data lake can optimize existing SIEMs or replace them. Anomali's threat intelligence sharing is aimed at ISACs and partners.Exabeam says its platform helps organizations of any size and maturity. Exabeam offers a cloud-native platform and an on-premises SIEM, so it addresses both cloud and self-hosted deployment preferences. Its pages describe replacing a legacy SIEM or augmenting an existing one with behavioral analytics and automation. Exabeam also targets organizations concerned with insider threats from both human users and AI agents.
Last verified
September 27, 2026September 27, 2026

Where they overlap

  • Anomali and Exabeam are both filed under AI SOC analysts.
  • Both are headquartered in the United States.

Where they differ, field by field

  • Anomali's primary category is AI SOC analysts; Exabeam's is SIEM.
  • Anomali is also filed under Threat intelligence and Security data lakes and pipelines.
  • Anomali lists Anomali Integrator. Exabeam lists New-Scale Fusion, New-Scale SIEM, Exabeam Nova, Outcomes Navigator, LogRhythm SIEM and 2 more.
  • Anomali is headquartered in Redwood City, United States. Exabeam is headquartered in Foster City, United States.
  • Exabeam was founded in 2013.
  • Exabeam is owned by Thoma Bravo, since 2024.

What it sells: Exabeam

What New-Scale Fusion does[1][5][9]
New-Scale Fusion unifies log management, behavioral analytics, dynamic risk scoring and automation in a modular platform. It can replace an existing SIEM or augment current tools. It runs on Google Cloud Platform.
What New-Scale SIEM does[5][9]
New-Scale SIEM combines fast search, advanced correlation and persistent AI co-investigation in a unified TDIR workbench. Threat Center unifies alerts, cases, detections and watchlists. New-Scale SIEM is delivered from GCP.
What Exabeam Nova does[1][5][9]
Exabeam Nova follows analysts through Threat Center, search timelines and Outcomes Navigator. It automates background context collection, secondary searches and triage assistance.
What LogRhythm SIEM does[5][11][12]
LogRhythm SIEM is deployed on-premises for complete data control. It includes 1,100+ prebuilt correlation rules mapped to MITRE ATT&CK and compliance mandates.
What LogRhythm Intelligence does[5][12]
LogRhythm Intelligence applies AI-driven behavioral analytics to surface user and entity anomalies in the LogRhythm SIEM platform. It is an add-on to LogRhythm SIEM and not available as a standalone product.

Questions about Anomali and Exabeam

What do Anomali and Exabeam sell?
Anomali sells Anomali Integrator. Exabeam sells New-Scale Fusion, New-Scale SIEM, Exabeam Nova, Outcomes Navigator, LogRhythm SIEM and 2 more.
Are Anomali and Exabeam in the same category?
They share AI SOC analysts. Anomali's primary category is AI SOC analysts and Exabeam's is SIEM.
Where are Anomali and Exabeam headquartered?
Anomali is headquartered in Redwood City, United States. Exabeam is headquartered in Foster City, United States.
When were Anomali and Exabeam founded?
Exabeam was founded in 2013.
Who owns Anomali and Exabeam?
Exabeam is owned by Thoma Bravo, since 2024.
Who are Anomali and Exabeam sold to?
From its own pages, Anomali sells mainly to enterprise security teams and public-sector organizations. Exabeam says its platform helps organizations of any size and maturity.
What have Anomali and Exabeam announced recently?
May 5, 2026: Anomali announced ThreatStream Next-Gen, available as a standalone intelligence solution and embedded within the Anomali Unified Security Data Lake. October 1, 2026: Exabeam introduced new Agentic SOC capabilities that bring AI-driven investigation, execution, and governance to cloud and on-premises environments.

About Anomali

Anomali is a cybersecurity platform that combines a unified security data lake, threat intelligence, and agentic AI for security operations. Anomali says the platform is designed to help security teams centralize data, enrich it with threat context, and improve detection, investigation, and response.[6]

Anomali describes the problem it addresses as security teams having more telemetry, tools, and AI initiatives than ever while the underlying data remains fragmented, noisy, and disconnected from the intelligence needed to act. Anomali cites 69% of enterprises running 10 or more detection and response tools, and says analysts face 174 alerts per day, of which only 22% are worth a real investigation.

Anomali says it normalizes everything into OCSF, one common schema, so a detection is written once and works everywhere. Native threat intelligence enrichment is applied at ingest and search time through native integration with ThreatStream Next-Gen. Anomali says the data lake can be used to optimize existing SIEMs or replace them entirely.[7][12]

Anomali says it aggregates intelligence from hundreds of open, commercial, and community sources, backed by over a decade of continuously curated threat graph. That intelligence is fused with the customer's assets, users, event logs, and incident history, and can be pushed to detection tools, response playbooks, and AI agents. ThreatStream Next-Gen also supports sharing intelligence with ISACs, partners, and internal teams via Trusted Circles and STIX/TAXII.[8]

AURA, the Anomali Unified Response Agent, triages, investigates, and recommends, with approval thresholds, rollback, and an audit trail. Anomali says that by default, consequential actions await human approval. The Anomali Autonomy Model moves each workflow from Recommend to Approve to Act, one step at a time.

Anomali Integrator enriches and automatically distributes threat intelligence across a customer's security ecosystem. It includes out-of-the-box integrations with common endpoints, SIEMs, firewalls, proxies, DNS, ISACs, and more.[9][10]

Anomali states that it has 400+ enterprise customers across financial services, critical infrastructure, government, and national defense, and says it is backed by Google Ventures, General Catalyst, and IVP. Anomali says its platform works with the SIEM, EDR, cloud, identity, email, and SOC tools customers already own.

Anomali names its founder as Hugh Njemanze and its CTO as Wei Huang.[1][6][7][9][10][11]

Anomali on the record

Sources

Anomali full record

  1. [1]anomali.comAnomali · anomali.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Anomali launches ThreatStream Next-Gen to turn intelligence into action — at the speed threats demandAnomali · published May 5, 2026 · Tier A
  3. [3]Anomali | Agentic SOC Platform for Governed Security ActionAnomali · undated page, accessed October 23, 2026 · Tier A
  4. [4]Anomali Security Analytics Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 23, 2026 · Tier C
  5. [5]Anomali Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 23, 2026 · Tier C
  6. [6]About Anomali | AI-Powered Security and IT OperationsAnomali · undated page, accessed November 4, 2026 · Tier A
  7. [7]Unified Security Data Lake | AnomaliAnomali · undated page, accessed November 4, 2026 · Tier A
  8. [8]ThreatStream Next-Gen - Managed Threat Intelligence | AnomaliAnomali · undated page, accessed November 4, 2026 · Tier A
  9. [9]Anomali Integrator | Security Automation and OrchestrationAnomali · undated page, accessed November 4, 2026 · Tier A
  10. [10]Customer Success for Security Operations Teams | AnomaliAnomali · undated page, accessed November 4, 2026 · Tier A
  11. [11]Cybersecurity Training | Anomali UniversityAnomali · undated page, accessed November 4, 2026 · Tier A
  12. [12]AI-Powered Cybersecurity & Agentic SOC Platform | AnomaliAnomali · undated page, accessed November 4, 2026 · Tier A

Exabeam full record

  1. [1]Exabeam new scale fusion security operations platformExabeam · exabeam.com · published July 1, 2026 · Tier A
  2. [2]About usExabeam · exabeam.com · published September 15, 2026 · Tier A
  3. [3]Exabeam and logrhythm complete merger and announce new company detailsThoma Bravo · thomabravo.com · published July 17, 2024 · Tier B
  4. [4]Exabeam opens new office in plano tx expands customer service and support in north americaExabeam · exabeam.com · published November 3, 2022 · Tier A
  5. [5]Exabeam | Cybersecurity & Compliance with Security Log Management and SIEMExabeam · undated page, accessed October 24, 2026 · Tier A
  6. [6]Exabeam Expands Behavior Intelligence to Secure the Agentic EnterpriseBusiness Wire · published July 1, 2026 · Tier A
  7. [7]Exabeam New-Scale Platform Reviews & Product Details - G2G2 · undated page, accessed October 24, 2026 · Tier C
  8. [8]Exabeam Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 24, 2026 · Tier C
  9. [9]New-Scale SIEM | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  10. [10]Exabeam | Cybersecurity & Compliance with Security Log Management and SIEMExabeam · undated page, accessed November 3, 2026 · Tier A
  11. [11]LogRhythm SIEM | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  12. [12]LogRhythm Intelligence | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  13. [13]NetMon | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  14. [14]The Exabeam Difference | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  15. [15]The Agentic SOC, Delivered: Exabeam Accelerates AI-Powered Security Operations to Machine SpeedExabeam · published October 1, 2026 · Tier A
  16. [16]Exabeam launches Praxen, an open-source tool to verify AI agent behaviorSiliconANGLE · published June 23, 2026 · Tier B

Spot a factual error? Request a correction.