During the evaluation phase, the company had considered Splunk against USM Anywhere. Cost is the main reason my company chose USM Anywhere over Splunk.

This organization has AlienVault, and they're not happy with it, so I'm looking at other solutions. However, I don't know what their pain points were. I thought it was a great solution for my previous organization. It has tremendous benefits, and it brings everything into one single pane that includes your vulnerability management, asset management, IDS, logs, and correlation. It does all of those things in one single pane, and I think that's one of the benefits of AlienVault.

We have done a PoC in my current company, and I find both AlienVault and Datadog to be good, but we are exploring more options and doing a PoC with other solutions. We have not yet finalized any solution.

We evaluated Microsoft Sentinel and IBM QRadar before choosing AT&T AlienVault USM.

AT&T AlienVault USM is very easy to deploy, user-friendly, easy to understand, and fits very well for small, and medium-sized businesses. I won't say it is a con for the other ones, but they are more suitable for larger-sized companies and sometimes it is cost a lot for Microsoft Sentinel and IBM QRadar.

Yes, I myself have had experience with IBM QRadar, Splunk Enterprise, and Logrhythm, but my company has experience with several others. 

We tried Elastic Security, but it was difficult for us to implement.

Recently, we were going to sell a customer AlienVault, but then they picked Microsoft Sentinel. We compared them because we wanted to make sure that  both solutions could do the same thing, and it turns out that Microsoft does it a little bit better.

It's like having a Swiss Army knife that has all of the tools you need to do a craft, or just having a regular pocketknife that you can only use to do one thing. In this case, AT&T is the pocketknife and Microsoft is the Swiss Army knife.

I had eliminated others prior to evaluating AlienVault based on prior experience. Tripwire for FIM, QRadar for SIM, eEye Digital for vulnerability scans. All of which are great tools, but much more pricey. We briefly looked at LogRhythm, Tenable, and Splunk as well.

We evaluated every single SIEM on the market. The major difference that made AlienVault stand out is the unification, meaning the integration of technologies out-of-the-box, as opposed to having to do it on your own.

We evaluated:

• Splunk
• LogRhythm
• ArcSight
• EventTracker
• RSA NetWitness
• SolarWinds
• QRadar
• FortiSIEM.
• And I may be leaving out a few. This was around one year ago.

We looked at Splunk Enterprise with the added security module, and that worked great, but it also had a lot of overhead to get value out of it. We just didn't have the capacity for it.

Alert Logic, Cloud Passage and Event Tracker.

We were also looking at LogRhythm, Splunk, and few others. We decided on AlienVault, as they had a nice presentation (which told us what we wanted to hear) and the PoC proved it could do what we needed.

Splunk, QRadar, LogRythm, etc.

We evaluated another product: AlienVault OSSIM, but only for testing, we did not suggest it to our customers.

No, our tech department did the evaluating of all the options and chose AlienVault.

I looked at two others but I don't remember their names.

I did look at other options but I don't recall which ones. We were vetting for a while, but this one came highly recommended by a company we use locally for pen and vulnerability testing. They recommended AlienVault because they've seen it used in the area and they liked it a lot. We vetted it and said, "The heck with it. We're going with them."

We ran a few PoCs. The price and feature set were the best with AlienVault.

No, AlienVault fit what we needed for the phase we were in with the SOC.

No. We just had to decide if we wanted this or had time to work with it.

Yes, many other vendors - its been a while so I don't remember them all.

Before choosing this product, we did not evaluate other options., we looked at Nessus SecurityCenter with Log Management.

It was three years ago so I don't remember offhand. But AlienVault was one of two or three that I looked at.

We looked at a couple of other products before choosing AlienVault. We looked at LogRhythm and EventTracker.

We found other tools to be out of reach for our small department, so we did not seriously look at others.

We looked at several options. And we were already using several of them, both paid and open source. AlienVault allowed us to combine several solutions into one.

We evaluated LogRhythm and QRadar.

We looked at managed services from Dell SecureWorks as well as Qualys & Nessus.

We checked out several competitors. For what it can do and the cost, it was the best SIEM tool!

Darktrace and QRadar.

We evaluated Splunk as well. AlienVault was a much cheaper solution and required less time to be rolled out. Splunk is a much more difficult product to work with and almost requires a dedicated employee to manage.

Before choosing, we evaluated other options. We were looking at Splunk and Rapid7.

I was not able to find any other tool that was able to meet as many needs as I the AlienVault USM. I spent the entire trial testing AlienVault to make sure it would suit my needs.

SolarWinds, Splunk, LogRhythm.

We also looked at Solarwinds SIEM and network monitoring.

We are currently evaluating different SIEM solutions. I have found that all of them have issues, whether it is related to functionality or price point. Even the ones that have a high price don't provide everything that you need.

Yes. Our SIEM tool list, from which we were evaluating, included Splunk and LogRhythm.

I have used several SIEMs, but stick with ArcSight, Splunk, and AlienVault. It is more client dependent. I big pro for AlienVault is it's price point and resource requirements. Though I feel like AlienVault is best suited for small to mid sized business.

Other SIEM/USM products that we use are Splunk, LogRhythm and the free OSSIM version. The first two have a different cost model and compared to AlienVault they have (or lack) the real Swiss army knife approach. Furthermore there is a big difference in costs, this is why in the end AlienVault takes the lead.

I was not part of the product decision.

We did not evaluation any other options.

We also looked at Tripwire.

I have actually looked at a few other products, however we decided on this product as the cost versus what you get, far outweighed any other product we looked at. Many companies can’t afford to deploy a SIEM solution from some of the top companies on the market, however no company should be without a SIEM on their network with the risks companies face today. AlienVault provided the best bang for buck.

We had a look at the current offerings at that time, including Tripwire, McAfee, SourceFire, etc., but concluded that we would get the best-bang-for-the-bucks with AlienVault solution

We evaluated HPE ArcSight, IBM QRadar, LogRhythm, Splunk, and SolarWinds.

We evaluated EventTracker.

Yes, I did, the solution considered was HPE and Splunk

We used other solutions, but they couldn't compare: QRadar, Splunk, ArcSight and LogRhythm. All were way too expensive compared to AlienVault USM.

Yes, LogRhythm, and Splunk.

No.

N/A.

We did a SIEM solution comparison with McAfee ESM, IBM QRadar, and Fortinet.

N/A.

We did not evaluate other solutions.

I was not part of the process. I have heard that our team had tried other products, but mostly the cost was prohibitive in those alternatives.

We didn't look at any other solutions.

Before choosing this product, we evaluated other options. We were leaning heavily towards AccelOps but had worries about their viability as a business.

No.

We looked at some but I can't remember which ones.

We did not evaluate other options.

We also looked at AccelOps, LogRhythm, and IBM QRadar.

We evaluated the popular SIEM tools Splunk, LogRhythm, and SolarWinds. AlienVault provided the most features for the price point.

We evaluated ArcSight, RSA Security Analytics, and Splunk.

Before choosing this product, we did not evaluate other options.

We did compare it to some others solutions, but I don't remember which.

There were no other options looked at.

Splunk Enterprise Security.

Yes, but I wasn't apart of the research team.