Securonix Next-Gen SIEM Reviews

Users have experienced a positive return on investment (ROI) using Securonix Next-Gen SIEM. ROI is visible in terms of metrics obtained from Securonix and the ability to sell its services. The biggest ROI is in the time and manpower saved, with one engineer with expertise being enough to speed up investigations and free up other administrators. 

It takes a month for the benefits of the solution to be realized. Users have been able to prevent multiple threats and improve analysts' efficiency by using the contextual information provided by Securonix, resulting in a time savings of about 30%. 

Securonix Next-Gen SIEM has become the go-to tool for checking and verifying issues, saving around four to five hours a day. The cloud-native platform of Securonix has minimized the need for infrastructure management, reducing the manpower required. It has also added contextual information to security events, saving significant time compared to using a generic system.

Securonix Next-Gen SIEM's pricing is considered good, affordable, and competitive compared to other brands in the market. 

Some reviewers mentioned that the licensing can become more complex when adding more features while still maintaining that the pricing remains reasonable. There are no additional costs outside of the standard licensing fees, except for an initial installation service charge.  

Securonix's pricing is pretty good compared to other products like IBM and Splunk, offering clients the opportunity to implement a solution at half the price of other companies. The pricing may vary depending on the model chosen, such as an MSP or a single tenant.

• "I rate the pricing an eight on a scale of one to ten, where one is cheap, and ten is very expensive. It is a pretty expensive tool."
• "Compared to other known brands in the industry, the overall cost of the licenses is a bit higher than what customers expect."
• "The pricing is good, but by adding more things, the licensing becomes more complex because an EPS license fluctuates a lot. This licensing concept is going to be problematic in the long run."

Securonix Next-Gen SIEM's primary use case is for event correlation in cyber SOC services. It is used for security event correlation, behavior-based analysis, and monitoring attempted malware attacks. It is also used for monitoring firewalls, operating systems, active directories, and solutions in the cloud. The deployment of Securonix is on the cloud, with integration with platforms such as Microsoft Azure, Amazon, and the Google Cloud Platform. Additionally, it is used for user-behavior analytics, data loss prevention, and data acceleration. Customization of the platform is done to benefit the organization's specific needs, such as failed access attempts, network issues, and allowed/blocked activities.

The initial setup for Securonix Next-Gen SIEM was generally described as simple and straightforward. The implementation process involved following an interactive manual provided by Securonix and onboarding the necessary sources, which was not considered a complicated task. 

The number of employees required for the implementation varied but generally ranged from three to five individuals. Securonix provided guided training and assistance to address any queries or issues during the implementation. Maintenance responsibilities were primarily managed by Securonix, with minimal involvement required from the users. 

The cloud-native platform of Securonix was highlighted as a valuable feature, as it helped minimize infrastructure management and allowed for easy platform management from anywhere. The involvement of Securonix's team during the implementation process was appreciated, with their continuous support and updates being mentioned. The duration of the implementation varied, ranging from three weeks to four months, depending on the specific circumstances. 

Securonix Next-Gen SIEM is highly scalable and flexible. It offers unlimited scalability in a cloud environment, allowing for easy integration of larger data sources without any difficulties. 

The solution can increase its capacity and processing level as needed, making it suitable for taking on new clients. It can seamlessly handle the integration of multiple log sources with the available connectors, and if a connector is not available, integration is not possible, which is a common limitation for all SIEM tools. 

The solution also allows for easy scaling by increasing the EPS or allocating more resources to the RIN server, especially in cloud environments. It is considered an excellent option for scalability both for internal users and clients. 

That said, in certain situations with heavy investigation and multiple tabs open, the solution may become slow or get stuck, impacting performance. 

Securonix Next-Gen SIEM is highly stable and reliable. There are minimal problems and no major issues with the platform. It has consistently performed well in terms of ingesting log sources and has not caused any access or performance problems. 

The tool is praised for its ability to detect configuration mistakes and its value in providing analytics. While there have been occasional instances of instability or slowdown, they are not frequent or significant. The solution has undergone improvements over time, enhancing its stability and functionality. 

There's general confidence in the reliability and dependability of Securonix, and the support provided by the vendor has been prompt and effective in resolving any issues.