About Sumo Logic
Sumo Logic sells a platform that combines telemetry pipeline control, log analytics, SIEM and DojoAI agents. Sumo Logic says it enables digital organizations to transform massive amounts of data into actionable insights to prevent and remediate modern security and cloud operations challenges. The Sumo Logic Intelligent Operations Platform is built to address the increasing complexity of modern cybersecurity and cloud operations challenges.[6][7]
Sumo Logic SIEM provides security analysts and SOC managers with enhanced visibility across the enterprise to understand the scope and context of an attack. Sumo Logic SIEM parses, maps and creates normalized records from structured and unstructured data, and correlates detected threats to reduce log events. Sumo Logic UEBA baselines user and entity behavior and trains models on historical data to reduce false positives. Sumo Logic SIEM has Detection-as-Code support that helps security teams version and manage SIEM rules in GitHub. The SOC Analyst Agent automatically analyzes alerts, evaluates related activity and delivers an evidence-backed verdict. Sumo Logic SIEM Automation Service allows playbooks to run manually or automatically when an insight is created or closed.[2][6][8]
Sumo Logic Cloud SOAR delivers SOAR functionality in private cloud, single cloud, multi-cloud or hybrid cloud environments. In the War Room, security analysts get a complete, chronological and detailed picture of a specific incident process. Sumo Logic offers hundreds of out-of-the-box actions and playbooks, and the Sumo Logic team can develop connectors.
Sumo Logic DojoAI puts agentic AI to work across security and cloud operations. Sumo Logic describes a multi-agent AI platform built to power security operations and incident response. Mobot lets users talk to their data in plain language. The Summary Agent automatically explains what triggered an Insight, highlighting key signals and context. Sumo Logic MCP Server connects external AI clients to Log Analytics and SIEM. DojoAI uses foundation models hosted through Amazon Bedrock. Sumo Logic says customer data is never used to train AI models.[10]
Logs for Security collects and analyzes cloud-specific logs. Logs for Security integrates logs from AWS, Google Cloud and Azure. Sumo Logic offers pre-built PCI compliance dashboards. Sumo Logic collects log data from cloud and on-premises systems to analyze and resolve issues before they affect applications and systems. Sumo Logic describes an integrated observability platform for application data including logs, metrics and traces. Sumo Logic says its Kubernetes solution works for any Kubernetes setup on premise, AWS, Azure and GCP. Sumo Logic provides native integrations with data sources for Kubernetes: Prometheus, OpenTelemetry, FluentD, Fluentbit and Falco.[2][11][12]
Customers pay only for the data being used so they can ingest everything without budget waste. Sumo Logic positions one package for small-to-medium-sized DevOps and SecOps teams requiring ad-hoc investigation and troubleshooting. Sumo Logic positions a different package for maturing security teams looking for real-time threat detection, investigation and response. Sumo Logic says thousands of enterprises trust it. MSSP and other parent org admins can enable or disable Mobot and App Catalog for individual child orgs. Sumo Logic has a Claude Compliance API integration that pulls Claude Enterprise activity logs and Claude Platform activity logs into Sumo Logic.[6][10]
Sumo Logic Professional Services Cloud SIEM Implementation Services enable customers to rapidly deploy, operationalize, and realize value from their Sumo Logic SIEM investment.[6][11][14]
Sumo Logic on the record