![\"top-6-SIEM-vendors-watch-2018\"](\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/12\/SIEM-Vendors-Modified.jpg\")
<\/p>\n<\/p>\n
Digital information in 2018 is more akin to a deluge or flash flood than a trickle. A Fortune 500 enterprise\u2019s infrastructure can easily generate 10 terabytes of plain-text data per month. If improperly managed the logs, threat intelligence feeds, forensics, and IAM systems can create such a waterfall of data that many enterprises end up underwater while the pertinent security data floats by and breaches go undetected.<\/span><\/p>\n Security Information and Event Management (SIEM) solutions are specifically designed to help enterprises manage the increasing volumes of logs coming from disparate online sources and lessen the damage of sophisticated cyber-attacks by proactively monitoring networks for suspicious activity in real-time. SIEM solutions can also log activity for historical review, enabling administrators to examine past security concerns and look for patterns in attack behavior.<\/span><\/p>\n Traditionally, SIEM is deployed primarily for threat management\u2014the real-time monitoring and reporting of activity and access and to help enterprises meet stringent compliance requirements such as HIPAA, PCI DSS, SOX, and more. However, as information security has evolved, so have SIEM capabilities. Today\u2019s SIEM systems are quickly embracing new capabilities such as user and entity behavioral analytics (UEBA), which can help enterprises detect potential threats from both people and programs and eliminate them before they turn into costly breaches.<\/span><\/p>\n Today, the SIEM market is mature and full of vendors capable of meeting the basic log management, compliance, and event monitoring requirements of a typical customer. At the same time, it is rapidly turning into a competitive market as more and more companies launch their own SIEM platforms or upgrade their UEBA tools. As we hurtle towards 2018, many companies are gearing up for business in a perilous market, consolidating their platforms and partnerships to compete on a stage that could continue to grow or suddenly shrink with innovations. 2018 has the potential to be a year of upheaval for SIEM, so here are my top six SIEM vendors to watch in alphabetical order.<\/span><\/p>\n AlienVault\u2019s 2017 was marked by expanding their market and reaching out to new customers. In late November their Unified Security Management (USM) platform became <\/span>available<\/span><\/a> on the Amazon Web Services (AWS) Marketplace and received the <\/span>AWS Security Competency<\/span><\/a>, which recognizes technical proficiency and proven customer satisfaction. They also recently partnered with ConnectWise, a business management solutions provider, to offer a new product integration. In addition, the USM platform tied for first place at the Cybersecurity Excellence Award for SIEM Products. \u00a0These moves could signal that AlienVault is preparing to take the SIEM field by storm next year. <\/span><\/p>\n September saw the <\/span>dual announcement<\/span><\/a> from Boston-based EiQ Networks that they had raised $7 million in growth capital and its rebranding to Cygilant to emphasize its commitment to protection. With this windfall investment, they are developing a new Security Operations and Analytics Platform called SOCVue and working on customer acquisition. Cygilant also recently released a vulnerability and patch management subscription service to assist overwhelmed IT departments. These were big steps from a vendor that deliberately positions itself to attract mid-sized to global enterprises, and they could prove the steps that rocket them into the front of the pack in 2018. \u00a0\u00a0\u00a0<\/span><\/p>\n The other first place winner at the Cybersecurity Excellence Award for SIEM Products, Maryland-based EventTracker also made Gartner\u2019s Magic Quadrant for SIEM for the tenth year in a row, making 2017 a good year for the vendor in terms of industry recognition. They also<\/span> launched<\/span><\/a> Security Center 8.3, the latest version of their SIEM platform designed to expand the platform\u2019s threat intelligence and ransomware response in June of this year. 2018 may represent another chance not just for praise but for even greater innovation as the war against hackers escalates. \u00a0<\/span><\/p>\n 2017 proved a good year for Colorado-based vendor LogRhythm. They unveiled <\/span>CloudAI<\/span><\/a>, a cloud-based security add-on subscription to help customers prevent data breaches, in October. The new service features machine learning and self-evolving analytics to better detect user-based threats. LogRhythm received plenty of industry praise in 2017 as well; they won the award for \u201cBest SIEM\u201d by the SANS Institute this year and the <\/span>Gold place distinction<\/span><\/a> for SIEM in Gartner\u2019s Peer Insights Customer Choice Awards, the result of a committed focus on improving usability. LogRhythm appears to be going into 2018 with plenty of innovation and energy. <\/span><\/p>\n A long-time <\/span>security powerhouse<\/span><\/a> from Massachusetts, RSA is one to watch in any year. Most recently in the realm of SIEM, The Department of Defense placed the RSA NetWitness Suite to their Approved Products List. Given the <\/span>recent scandals<\/span><\/a> surrounding vendors\u2019 codes on federal computers, this is a prestigious recognition especially because at time of writing they are the only centralized SIEM solution on the list. This could promote their SIEM solution to federal agencies and major corporations, adding to their status and market share in 2018. <\/span><\/p>\n In late 2017, Solarwinds went into a flurry of activity. They <\/span>unveiled<\/span><\/a> the integration of their RMM and Backup Document solutions and the <\/span>upgraded<\/span><\/a> Cloud Software as a Service portfolio which includes application and infrastructure monitoring. Earlier this year, they <\/span>announced<\/span><\/a> two new unified network management solutions, which <\/span>provide fault availability and performance monitoring, as well as bandwidth and traffic monitoring and switch port monitoring.<\/span> To top it all off, they won the Platinum Award for SIEM at the 2017 ASTORS Homeland Security Awards. These moves might indicate that Solarwinds is centralizing their products to prepare for a 2018 of change and competition.<\/span><\/p>\n Is SIEM the right solution for your enterprise’s cybersecurity needs? Detection is fast becoming more important to proper digital security platforms than ever as preventative measures\u2014while still valuable\u2014prove to be unable to intercept 100% of all incoming threats. Reducing attacker dwell time and increasing visibility into your disparate IT environment can be essential to mitigating the damage a threat attack wreaks on your servers.<\/p>\n While SIEM vendors’ solutions can prove instrumental in fulfilling your regulatory and industrial compliance mandates, it’s greatest asset is its threat management capabilities. The real question why you haven’t selected your SIEM solution today.<\/p>\n You can learn more about SIEM via the AlienVault whitepaper Beginner’s Guide to SIEM<\/em><\/a> or in our own 2018 Buyer’s Guide.<\/a><\/p>\n Digital information in 2018 is more akin to a deluge or flash flood than a trickle. A Fortune 500 enterprise\u2019s infrastructure can easily generate 10 terabytes of plain-text data per month. If improperly managed the logs, threat intelligence feeds, forensics, and IAM systems can create such a waterfall of data that many enterprises end up […]<\/p>\n","protected":false},"author":41,"featured_media":1113,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[473,175,95,447,293,211,36,10,22,83],"acf":[],"yoast_head":"\n\t\t\t![\"Download](\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2020\/02\/SIEM_VM_SB.jpg\")
<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n1. AlienVault<\/b><\/h3>\n
2. Cygilant (formerly EiQ Networks) <\/b><\/h3>\n
3. EventTracker<\/b><\/h3>\n
4. LogRhythm <\/b><\/h3>\n
5. RSA<\/b><\/h3>\n
6. Solarwinds <\/b><\/h3>\n
Widget not in any sidebars
\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"