SIEM
Platforms that collect and correlate logs and events to detect threats and support investigation and compliance reporting.
33 vendors · alphabetical
- 7AI7AI sells an agentic security platform that runs the whole security operations lifecycle as one system: detect, investigate, respond, and hunt. 7AI says its agents do the non human work, with humans on the loop.Privately held
- AlphabetAlphabet sells a full suite of security products and services to protect workloads and meet digital sovereignty requirements.Ownership not established · primary category
- Binary DefenseBinary Defense sells MDR as the service and NightBeacon CMD as the technology.Ownership not established
- Blackpoint CyberBlackpoint Cyber sells managed detection and response to organizations of all sizes around the world, along with the CompassOne platform.Ownership not established
- CiscoCisco sells security products that protect users, devices, apps, and data.Public (NASDAQ: CSCO)
- CriblCribl sells the AI Platform for Telemetry to IT and security teams.Privately held
- CynetCynet sells an AI-powered platform that unifies endpoint, identity, network, email, SaaS, cloud, SIEM and automation.Ownership not established
- DefenseStormDefenseStorm sells a cyber risk management platform designed exclusively for U.S. banks and credit unions.Ownership not established
- DevoDevo sells a security data platform that replaces traditional SIEMs and includes data-powered SIEM, SOAR and UEBA.Privately held
- ElasticElastic sells Elastic Security, an open, agentic security operations platform that offers SIEM, endpoint security, and native automation.Ownership not established · primary category
- ExabeamExabeam sells security operations software for threat detection, investigation and response (TDIR), including cloud-native SIEM, behavioral analytics and an on-premises SIEM platform.Owned by Thoma Bravo since 2024 · primary category
- ExaforceExaforce sells a platform built on a unified data layer and real-time knowledge graph, with agents that help security teams detect, triage, investigate, and respond to threats.Privately held
- FortinetFortinet sells cybersecurity and networking technology to enterprises, service providers, and government organizations.Public (NASDAQ: FTNT)
- GraylogGraylog sells SIEM and log management.Ownership not established · primary category
- GuardsixGuardsix is a European security company that sells a sovereign security platform for lean defenders, with products for SIEM, NDR, SOAR, fleet management and access governance.Owned by Summa Equity since 2023 · primary category
- GuruculGurucul sells unified Entity Intelligence, which fuses Behavioral AI with traditional detections across humans, machines and AI systems.Ownership not established · primary category
- HuntersHunters sells Hunters SOC Platform, a Next-Gen SIEM for small security teams that uses AI and automation to prioritize, investigate and respond to alerts.Ownership not established · primary category
- HuntressHuntress products are built to protect organizations of all sizes.Ownership not established
- MaveMave runs investigations, searches, threat hunts, detection hardening, and governed responses across a customer's existing stack.Ownership not established
- MicrosoftMicrosoft Defender offers threat prevention, detection and response capabilities.Public (NASDAQ: MSFT)
- PantherPanther is an AI SOC platform that ingests and normalizes logs at petabyte scale, lets teams write detection rules in Python, and automatically creates detections using AI and natural language.Ownership not established
- ProficioProficio sells managed detection and response (MDR) services.Ownership not established
- Proximus NXTProximus NXT offers business cybersecurity solutions tailored to an organisation's size and needs, from employee awareness training to advanced protection tools.Public (Euronext Brussels: PROX)
- Rapid7Rapid7 sells the Command Platform, which runs cloud security, SIEM, application security, vulnerability management, automation and attack surface management solutions, along with managed services offerings built on these solutions.Ownership not established
- Realm SecurityRealm Security sells a SOC-aware Security Data Pipeline Platform, abbreviated SDPP.Ownership not established
- RunRevealRunReveal sells a unified platform that handles the security lifecycle from data ingestion through investigation and remediation.Ownership not established · primary category
- SecuronixSecuronix sells Unified Defense SIEM, which it describes as a connected operating model for modern SecOps for enterprises.Ownership not established · primary category
- SolarWindsSolarWinds sells monitoring, observability and service management capabilities on a platform offered in self-hosted and SaaS deployment models.Ownership not established
- SplunkSplunk sells a data platform for security, observability, and AI, and says the platform unifies petabyte-scale machine data wherever it lives.Owned by Cisco · primary category
- Stellar CyberStellar Cyber sells a SecOps platform that uses AI for threat detection and response through unified NG-SIEM, NDR, and Open XDR capabilities.Privately held · primary category
- Sumo LogicSumo Logic sells a platform that combines telemetry pipeline control, log analytics, SIEM and DojoAI agents.Owned by Francisco Partners since 2023 · primary category
- Tenfold SecurityTenfold Security provides Active Penetration Testing, Real-Time Risk Assessment, Managed SIEM and CrowdStrike services.Ownership not established
- ThreatDefenceThreatDefence delivers a fully managed 24×7 SOC as a Service that combines its SecOps Platform with a team of cyber security experts who monitor, investigate and respond.Ownership not established