CISO Tribune

Vendor comparison · 2 companies

Exabeam vs IRONSCALES

Exabeam sells security operations software for threat detection, investigation and response (TDIR), including cloud-native SIEM, behavioral analytics and an on-premises SIEM platform. IRONSCALES sells email security that protects Microsoft 365 and Google Workspace against business email compromise, account takeover, malware and malicious URLs, credential harvesting, generative AI attacks, QR code and image-based phishing, and deepfake impersonation in Microsoft Teams meetings. CISO Tribune files both under AI SOC analysts. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Exabeam
  • IRONSCALES
Exabeam vs IRONSCALES: Products, Customers and Funding Compared
ExabeamExabeam sells security operations software for threat detection, investigation and response (TDIR), including cloud-native SIEM, behavioral analytics and an on-premises SIEM platform.exabeam.comIRONSCALESIRONSCALES sells email security that protects Microsoft 365 and Google Workspace against business email compromise, account takeover, malware and malicious URLs, credential harvesting, generative AI attacks, QR code and image-based phishing, and deepfake impersonation in Microsoft Teams meetings.ironscales.com
What it sells
  • New-Scale Fusion[1][5][9]A cloud-native platform combining New-Scale SIEM and New-Scale Analytics.
  • New-Scale SIEM[5][9]A cloud-native SIEM with search, correlation and AI co-investigation in a TDIR workbench.
  • Exabeam Nova[1][5][9]A platform-wide co-investigator for analysts.
  • Outcomes Navigator[5][9]Maps data to use cases and frameworks.
  • LogRhythm SIEM[5][11][12]An on-premises SIEM platform.
  • LogRhythm Intelligence[5][12]An add-on bringing behavioral analytics to LogRhythm SIEM.
  • NetMon[13]Network traffic monitoring for LogRhythm or New-Scale deployments.
  • Phishing SOC Agent[6][10]Delivers L2-level forensics on suspicious email.
  • Phishing Simulation Agent[6][10]Builds phishing simulations from OSINT gathered on employees.
  • Human Risk Management[11]Phishing simulation, security awareness training, and user risk scoring.
  • Themis[2][9]An agentic AI virtual SOC that classifies, clusters, and remediates threats.
  • Email Incident Management Service (EIMS)[12]IRONSCALES experts handle email threat investigation, remediation, and AI tuning.
Categories
Headquarters
Foster City, United States[4]Atlanta, United States[1][13]
Founded
2013[2]2014[1][13]
Ownership and funding
Owned by Thoma Bravo since 2024[5][7][8]Privately held[4][8]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 1, 2026Exabeam introduced new Agentic SOC capabilities that bring AI-driven investigation, execution, and governance to cloud and on-premises environments.[15]
  • July 1, 2026Exabeam expanded its Behavior Intelligence capabilities to help organizations secure AI agents, autonomous workflows, and human-to-agent interactions.[6]
  • June 23, 2026Exabeam introduced Agent Behavior Verification and released Praxen, an open-source tool that tests an AI agent against its intended role before deployment.[16]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen November 3, 2026[8]
  • G2: listed, seen October 25, 2026[8]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Exabeam says its platform helps organizations of any size and maturity. Exabeam offers a cloud-native platform and an on-premises SIEM, so it addresses both cloud and self-hosted deployment preferences. Its pages describe replacing a legacy SIEM or augmenting an existing one with behavioral analytics and automation. Exabeam also targets organizations concerned with insider threats from both human users and AI agents.From its own pages, the company sells mainly to enterprises and to MSPs and MSSPs. One entry point addresses global companies that are transforming their email security to tackle modern threats. The site also presents a comparison of secure email gateways and API-based solutions for enterprises and MSPs.
Last verified
September 27, 2026November 2, 2026

Where they overlap

  • Exabeam and IRONSCALES are both filed under AI SOC analysts.
  • Both are headquartered in the United States.

Where they differ, field by field

  • Exabeam's primary category is SIEM; IRONSCALES's is Email security.
  • Exabeam lists New-Scale Fusion, New-Scale SIEM, Exabeam Nova, Outcomes Navigator, LogRhythm SIEM and 2 more. IRONSCALES lists Phishing SOC Agent, Phishing Simulation Agent, Human Risk Management, Themis and Email Incident Management Service (EIMS).
  • Exabeam is headquartered in Foster City, United States. IRONSCALES is headquartered in Atlanta, United States.
  • Exabeam was founded in 2013. IRONSCALES was founded in 2014.
  • Exabeam is owned by Thoma Bravo, since 2024. IRONSCALES is privately held.

What it sells: Exabeam

What New-Scale Fusion does[1][5][9]
New-Scale Fusion unifies log management, behavioral analytics, dynamic risk scoring and automation in a modular platform. It can replace an existing SIEM or augment current tools. It runs on Google Cloud Platform.
What New-Scale SIEM does[5][9]
New-Scale SIEM combines fast search, advanced correlation and persistent AI co-investigation in a unified TDIR workbench. Threat Center unifies alerts, cases, detections and watchlists. New-Scale SIEM is delivered from GCP.
What Exabeam Nova does[1][5][9]
Exabeam Nova follows analysts through Threat Center, search timelines and Outcomes Navigator. It automates background context collection, secondary searches and triage assistance.
What LogRhythm SIEM does[5][11][12]
LogRhythm SIEM is deployed on-premises for complete data control. It includes 1,100+ prebuilt correlation rules mapped to MITRE ATT&CK and compliance mandates.
What LogRhythm Intelligence does[5][12]
LogRhythm Intelligence applies AI-driven behavioral analytics to surface user and entity anomalies in the LogRhythm SIEM platform. It is an add-on to LogRhythm SIEM and not available as a standalone product.

What it sells: IRONSCALES

What Phishing SOC Agent does[6][10]
Phishing SOC Agent delivers L2-level forensics in minutes and runs five analysis tracks in parallel: sender verification, body analysis for social engineering, link inspection through the full redirect chain, attachment detonation across 100+ engines, and relay path tracing. The agent's output is a Security Assessment with a verdict, key evidence, and a full activity log of every step it took.
What Phishing Simulation Agent does[6][10]
Phishing Simulation Agent gathers OSINT on people, including social media profiles, data breach exposure, and recent job changes, and builds simulations that mirror the tactics targeting the organization. Personalized phishing emails are written in each employee's native language, and one sample per employee cluster is approved by the customer.
What Human Risk Management does[11]
The platform incorporates Human Risk Management: phishing simulation, security awareness training, and user risk scoring modules that automatically tailor simulations to each employee's specific threat profile. IRONSCALES offers a GPT-powered spear phishing module for VIPs and frequently targeted employees.
What Themis does[2][9]
Themis is described as an agentic AI virtual SOC that automatically classifies, clusters, and remediates threats detected by machine learning models or user-reported emails. When a threat is detected, Themis takes autonomous action: quarantining, clustering, or escalating based on automation preferences.

Questions about Exabeam and IRONSCALES

What do Exabeam and IRONSCALES sell?
Exabeam sells New-Scale Fusion, New-Scale SIEM, Exabeam Nova, Outcomes Navigator, LogRhythm SIEM and 2 more. IRONSCALES sells Phishing SOC Agent, Phishing Simulation Agent, Human Risk Management, Themis and Email Incident Management Service (EIMS).
Are Exabeam and IRONSCALES in the same category?
They share AI SOC analysts. Exabeam's primary category is SIEM and IRONSCALES's is Email security.
Where are Exabeam and IRONSCALES headquartered?
Exabeam is headquartered in Foster City, United States. IRONSCALES is headquartered in Atlanta, United States.
When were Exabeam and IRONSCALES founded?
Exabeam was founded in 2013. IRONSCALES was founded in 2014.
Who owns Exabeam and IRONSCALES?
Exabeam is owned by Thoma Bravo, since 2024. IRONSCALES is privately held.
Who are Exabeam and IRONSCALES sold to?
Exabeam says its platform helps organizations of any size and maturity. From its own pages, the company sells mainly to enterprises and to MSPs and MSSPs.
What have Exabeam and IRONSCALES announced recently?
October 1, 2026: Exabeam introduced new Agentic SOC capabilities that bring AI-driven investigation, execution, and governance to cloud and on-premises environments.

About Exabeam

Exabeam sells security operations software for threat detection, investigation and response (TDIR), including cloud-native SIEM, behavioral analytics and an on-premises SIEM platform.[9]

Exabeam says AI agents now act alongside human employees, often at machine speed and massive scale, and that traditional security tools were not built to see or understand this behavior. Exabeam says it applies behavioral analytics to both humans and AI agents to help organizations detect signals of compromised credentials, malicious activity and misaligned autonomous systems earlier. User and entity behavior analytics (UEBA) and Agent Behavior Analytics (ABA) automatically baseline activity and expose anomalies.[10]

New-Scale Fusion is the cloud-native platform. New-Scale Fusion combines New-Scale SIEM and New-Scale Analytics in a modular platform that unifies log management, behavioral analytics, dynamic risk scoring and automation. Exabeam says New-Scale Fusion can be deployed to replace an existing SIEM or to augment current tools with behavioral analytics and automation. New-Scale Fusion runs on Google Cloud Platform (GCP) with a 99.5% uptime SLA, and customers select a hosting region at purchase.[1][9][14]

New-Scale SIEM combines fast search, advanced correlation and persistent AI co-investigation in a unified TDIR workbench. Exabeam Nova is a platform-wide co-investigator that follows analysts through Threat Center, search timelines and Outcomes Navigator. Threat Center unifies alerts, cases, detections and watchlists in one workbench.[1][9]

On data handling, Exabeam says prebuilt collectors process more than 2 million events per second (EPS) and that customers can start with 7,000+ prebuilt log parsers. The Common Information Model (CIM) normalizes data at ingestion. The Exabeam Threat Intelligence Service ingests and scores commercial and open-source threat feeds, updates every 24 hours, and is included at no extra cost.[9]

LogRhythm SIEM is deployed on-premises for complete data control. LogRhythm SIEM includes 1,100+ prebuilt correlation rules mapped to MITRE ATT&CK and compliance mandates. LogRhythm Intelligence applies AI-driven behavioral analytics to surface user and entity anomalies in the LogRhythm SIEM platform, and it is an add-on to LogRhythm SIEM rather than a standalone product. NetMon monitors network traffic for LogRhythm or New-Scale Security Operations Platform deployments.[11][12][13]

Exabeam names Resorts World Las Vegas, SA Power Networks, MTI Ltd and Port of Antwerp-Bruges among its customers. Exabeam says its platform helps organizations of any size and maturity improve security operations.[3][9][10][13][14]

Exabeam on the record

Sources

Exabeam full record

  1. [1]Exabeam new scale fusion security operations platformExabeam · exabeam.com · published July 1, 2026 · Tier A
  2. [2]About usExabeam · exabeam.com · published September 15, 2026 · Tier A
  3. [3]Exabeam and logrhythm complete merger and announce new company detailsThoma Bravo · thomabravo.com · published July 17, 2024 · Tier B
  4. [4]Exabeam opens new office in plano tx expands customer service and support in north americaExabeam · exabeam.com · published November 3, 2022 · Tier A
  5. [5]Exabeam | Cybersecurity & Compliance with Security Log Management and SIEMExabeam · undated page, accessed October 24, 2026 · Tier A
  6. [6]Exabeam Expands Behavior Intelligence to Secure the Agentic EnterpriseBusiness Wire · published July 1, 2026 · Tier A
  7. [7]Exabeam New-Scale Platform Reviews & Product Details - G2G2 · undated page, accessed October 24, 2026 · Tier C
  8. [8]Exabeam Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 24, 2026 · Tier C
  9. [9]New-Scale SIEM | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  10. [10]Exabeam | Cybersecurity & Compliance with Security Log Management and SIEMExabeam · undated page, accessed November 3, 2026 · Tier A
  11. [11]LogRhythm SIEM | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  12. [12]LogRhythm Intelligence | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  13. [13]NetMon | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  14. [14]The Exabeam Difference | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  15. [15]The Agentic SOC, Delivered: Exabeam Accelerates AI-Powered Security Operations to Machine SpeedExabeam · published October 1, 2026 · Tier A
  16. [16]Exabeam launches Praxen, an open-source tool to verify AI agent behaviorSiliconANGLE · published June 23, 2026 · Tier B

IRONSCALES full record

  1. [1]About usIRONSCALES · ironscales.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Platform | How It WorksIRONSCALES · undated page, accessed September 27, 2026 · Tier A
  3. [3]Ironscales raises series c funding roundIRONSCALES · ironscales.com · published December 7, 2021 · Tier A
  4. [4]Ironscales ipoForge Global · forgeglobal.com · undated page, accessed September 27, 2026 · Tier C
  5. [5]AI Email Security Platform for Phishing & Deepfakes | IronscalesIRONSCALES · undated page, accessed October 25, 2026 · Tier A
  6. [6]Email Security AgentsIRONSCALES · undated page, accessed October 25, 2026 · Tier A
  7. [7]IRONSCALES | Complete Email Security & Training SolutionsIRONSCALES · undated page, accessed October 25, 2026 · Tier A
  8. [8]IRONSCALES Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 25, 2026 · Tier C
  9. [9]SOC Automation SolutionIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  10. [10]Platform | What's NewIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  11. [11]Platform | Human ElementIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  12. [12]Pricing | IronscalesIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  13. [13]IRONSCALES | About Us | Our StoryIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  14. [14]Education Email Security Solutions | IRONSCALESIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  15. [15]Augment your Secure Email Gateway with IRONSCALESIRONSCALES · undated page, accessed November 10, 2026 · Tier A
  16. [16]DMARC Management and MonitoringIRONSCALES · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.