Elastic, Exabeam, Gurucul and Securonix

About Exabeam

Exabeam sells security operations software for threat detection, investigation and response (TDIR), including cloud-native SIEM, behavioral analytics and an on-premises SIEM platform.^[9]

Exabeam says AI agents now act alongside human employees, often at machine speed and massive scale, and that traditional security tools were not built to see or understand this behavior. Exabeam says it applies behavioral analytics to both humans and AI agents to help organizations detect signals of compromised credentials, malicious activity and misaligned autonomous systems earlier. User and entity behavior analytics (UEBA) and Agent Behavior Analytics (ABA) automatically baseline activity and expose anomalies.^[10]

New-Scale Fusion is the cloud-native platform. New-Scale Fusion combines New-Scale SIEM and New-Scale Analytics in a modular platform that unifies log management, behavioral analytics, dynamic risk scoring and automation. Exabeam says New-Scale Fusion can be deployed to replace an existing SIEM or to augment current tools with behavioral analytics and automation. New-Scale Fusion runs on Google Cloud Platform (GCP) with a 99.5% uptime SLA, and customers select a hosting region at purchase.^[1][9][14]

New-Scale SIEM combines fast search, advanced correlation and persistent AI co-investigation in a unified TDIR workbench. Exabeam Nova is a platform-wide co-investigator that follows analysts through Threat Center, search timelines and Outcomes Navigator. Threat Center unifies alerts, cases, detections and watchlists in one workbench.^[1][9]

On data handling, Exabeam says prebuilt collectors process more than 2 million events per second (EPS) and that customers can start with 7,000+ prebuilt log parsers. The Common Information Model (CIM) normalizes data at ingestion. The Exabeam Threat Intelligence Service ingests and scores commercial and open-source threat feeds, updates every 24 hours, and is included at no extra cost.^[9]

LogRhythm SIEM is deployed on-premises for complete data control. LogRhythm SIEM includes 1,100+ prebuilt correlation rules mapped to MITRE ATT&CK and compliance mandates. LogRhythm Intelligence applies AI-driven behavioral analytics to surface user and entity anomalies in the LogRhythm SIEM platform, and it is an add-on to LogRhythm SIEM rather than a standalone product. NetMon monitors network traffic for LogRhythm or New-Scale Security Operations Platform deployments.^[11][12][13]

Exabeam names Resorts World Las Vegas, SA Power Networks, MTI Ltd and Port of Antwerp-Bruges among its customers. Exabeam says its platform helps organizations of any size and maturity improve security operations.^{[3][9][10][13][14]}

About Gurucul

Gurucul is a security analytics company that sells a SIEM platform combining behavioral AI with traditional detections to identify threats across users, machines and AI systems. It was founded in 2010 by security experts and seasoned entrepreneurs and has pioneered the UEBA category. Gurucul has quietly achieved profitability rather than pursuing large investment rounds. Its REVEAL platform underpins products spanning SIEM, UEBA, insider risk management, SOAR and AI risk and response.^[1][3]

About Securonix

Securonix sells Unified Defense SIEM, which it describes as a connected operating model for modern SecOps for enterprises. Securonix Unified Defense SIEM brings together SIEM, UEBA, SOAR, ThreatQ intelligence, Data Pipeline Manager, ThreatWatch, and Sam, the AI SOC Analyst. Securonix unifies analytics, threat intelligence, investigation, and response into a single cloud-native platform. Securonix says enterprises and MSSPs rely on it to modernize security operations, reduce operational risk, and move toward proactive, intelligence-driven defense.^{[1][2][4][8][11]}

Sam, the AI SOC Analyst, is embedded directly into the Unified Defense SIEM and is designed to work alongside human analysts, not replace them. Sam executes Tier 1 and Tier 2 work across triage, investigation, and response within the Securonix Agentic Mesh. Securonix coordinates AI agents across detection, investigation, and response through the Agentic Mesh, with human oversight. The Securonix Agentic Mesh coordinates specialized agents while Agentic Guardrails keep AI-supported work policy-bound, explainable, and auditable.^[4][8][9]

Securonix also describes AEBA as extending behavioral analytics beyond humans to detect abnormal AI agent behavior.^[4]

On the SIEM side, Securonix unifies threat detection, investigation, and response on Snowflake's Data Cloud. Securonix offers over 500 connectors that ingest data from across a hybrid infrastructure. Securonix describes its built-in SOAR as an integration between SIEM and SOAR that puts all of the data in one place. Securonix threat models map to both the MITRE ATT&CK and US-CERT frameworks. Securonix describes a scalable data lake with fast access to one year of hot data for investigations, threat hunting, and response.^[10]

Securonix ThreatQ is a threat intelligence platform. ThreatQ is now part of Securonix and brings curated threat intelligence into the Securonix security operations portfolio. Securonix ThreatQ integrates across SIEM, SOAR, EDR, NDR, cloud platforms, case management systems, and intelligence sources. Securonix ThreatWatch helps security teams move from emerging threat awareness to exposure validation. ThreatWatch is available as an add-on service and is not included with every deployment. Securonix Threat Research Agent is a bring-your-own-LLM agent built into the ThreatQ platform. Securonix lists Data Pipeline Manager for telemetry routing, retention, and cost control.^{[4][8][11][12]}

Securonix is headquartered in Addison, Texas, with offices in India, California, Georgia, New Jersey, the United Kingdom, Germany, and Singapore. Securonix is backed by Vista Equity Partners. Securonix says it is a chosen cybersecurity provider for 1,000+ enterprise and MSSP customers. Its pages feature a customer interview with the EVP and CISO of HDFC Bank. Securonix also runs training courses, and each learning credit provides up to four hours of instruction.^{[3][4][9][10][12][14]}