SIEM
Platforms that collect and correlate logs and events to detect threats and support investigation and compliance reporting.
14 vendors · alphabetical, never ranked
- CiscoCisco sells network security products including firewalls, a secure access service edge offering, identity and network access control products, and security information and event management software built on Splunk.Public (NASDAQ: CSCO)
- CriblCribl sells a telemetry data platform for IT and security teams, including Cribl Stream, which routes and shapes data, Cribl Lake, a managed data lake for that telemetry, and Cribl Search, which queries it across storage destinations.Privately held
- DevoDevo sells a security data platform that ingests and stores large volumes of security telemetry and orchestrates which data is kept hot for real-time analytics, with integrated SIEM, SOAR and UEBA.Privately held
- ExabeamExabeam sells New-Scale Fusion, a cloud-native platform that combines a SIEM with behavioral analytics, automation and AI agents for threat detection, investigation and response.Owned by Thoma Bravo since 2024 · primary category
- FortinetFortinet sells network security products built around its FortiGate firewall line, along with a unified SASE bundle of SD-WAN, ZTNA, CASB and WAF, and a security operations product line spanning SIEM, SOAR, EDR, XDR and NDR.Public (NASDAQ: FTNT)
- GraylogGraylog sells an AI-powered SIEM and centralized log management platform that helps security and IT teams detect and investigate threats, summarize dashboards and automate workflows.Ownership not established · primary category
- GuardsixLogpoint rebranded as Guardsix in March 2026.Owned by Summa Equity since 2023 · primary category
- HuntersHunters sells a cloud-native SOC platform that ingests, retains and correlates security data to detect, investigate and respond to threats, along with Pathfinder AI, an agentic AI capability that automates alert triage and investigation.Ownership not established · primary category
- MicrosoftMicrosoft sells a set of security products including Defender for extended detection and response, Sentinel for cloud-native SIEM, Purview for data protection and governance, Entra for identity and access, and Intune for endpoint management.Public (NASDAQ: MSFT)
- PantherPanther sells an AI SOC platform that combines a security data lake, detection-as-code rules and an AI layer, so that analyst investigation outcomes feed back into the detections that generated the alerts.Ownership not established
- SecuronixSecuronix sells Unified Defense SIEM, a cloud-native platform that combines security information and event management with user and entity behavior analytics, SOAR and threat intelligence, along with an AI agent called Sam that helps triage alerts.Ownership not established · primary category
- SplunkSplunk sells a platform that collects and correlates machine data for security and IT operations, including a security information and event management product and a security orchestration and automation product.Owned by Cisco · primary category
- Stellar CyberStellar Cyber sells a SecOps platform that unifies SIEM, network detection and response, identity threat detection and response, and user and entity behavior analytics with AI-driven detection, investigation and response.Privately held · primary category
- Sumo LogicSumo Logic sells a cloud SIEM that triages alerts and correlates threats from log data, along with a related security and compliance product built on the same log platform.Owned by Francisco Partners since 2023 · primary category
No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.