LevelBlue USM Anywhere vs. LogRhythm NextGen SIEM Platform

LevelBlue USM Anywhere

733 Reviews and Ratings

LogRhythm NextGen SIEM Platform

68 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
LevelBlue USM Anywhere	Score3.7 out of 10	N/A	The LevelBlue USM Anywhere XDR platform (replacing the former AlienVault USM) delivers threat detection, incident response, and compliance management.	$1,075 per month
LogRhythm NextGen SIEM Platform	Score7.6 out of 10	N/A	The LogRhythm NextGen SIEM Platform, from LogRhythm in Boulder, Colorado, is security information and event management (SIEM) software which includes SOAR functionality via SmartResponse Automation Plugins (a RespondX feature), the DetectX security analytics module, and AnalytiX as a log management solution that centralizes log data, enriches it with contextual details and applies a consistent schema across all data types.	N/A

Pricing

LevelBlue USM Anywhere

LogRhythm NextGen SIEM Platform

Essentials: $1,075
per month
Standard: $1,695
per month
Premium: $2,595
per month

No answers on this topic

Pricing Offerings
LevelBlue USM Anywhere	LogRhythm NextGen SIEM Platform
Free Trial
Yes	No
Free/Freemium Version
Yes	No
Premium Consulting/Integration Services
Yes	No

Optional

No setup fee

—

—

Community Pulse
Key User Insights
	LevelBlue USM Anywhere	LogRhythm NextGen SIEM Platform
Considered Both Products	LevelBlue Verified User Chose LevelBlue USM Anywhere The cost of AlienVault is what sold us on AlienVault. However, considering the amount of time and effort that has gone into getting it set up and realizing that views and reports cannot be shared across groups makes it not worth the savings. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere I evaluated Splunk in the past but found the interface and work required to build queries and manage alerting was more work than I was willing to take on. I didn't like having to learn another language just to search for what I wanted. Through a managed service provider I also … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere Splunk's ES is a paid add-on on top of an already pricey product. Finding a MSSP that supports Splunk and isn't a 6 figure annual commitment seems unlikely. LogRhythm did not have a cloud-based solution when we were considering SIEMs. Fantastic product though and have a good … Incentivized Helpful? Frank DePaola Head of Information Security in Corporate at EnPro Industries (Mechanical or Industrial Engineering, 5001-10,000 employees) Chose LevelBlue USM Anywhere With the exception of Solar Winds, AlienVault USM is far easier to administer and support, but far less extensible. LogRhythm and Splunk are going to offer far more advanced capabilities in the way of deployment models, features, and automation capabilities. Also, other … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AlienVault was the cheapest solution compared with the competition and had similar or better features. Also, the SaaS based solution made it easy to deploy the solution without the need to maintain additional servers on premise. It was very easy to use and had a great UI which … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere SIEM vendors are having to adapt and thus it is difficult to perform a true apples-to-apples comparison between all the vendors. They offer different features and can even take different approaches to solving the logging and SIEM issue. Still, with that consideration in mind, … Incentivized Helpful? Jason LeBlanc Consultant in Information Technology at Aon Integramark (Insurance, 201-500 employees) Chose LevelBlue USM Anywhere Solarwinds LEM was replaced with USM, the UI and the sluggishness and lack of ease of use made that decision easy. LogRhythm was a top contender, the cost and complexity to implement made USM an easy choice. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AlienVault was able to provide the same basic functionalities as the other competitors. Open Threat Exchange is a really good feature, and the fact that it came with intrusion detection was a huge plus and key part of why we purchased. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere We found AlienVault to best suit our environment and provide the level of detail that we needed to not only secure our environment but to help us prepare for IT asset audits. It has VMWare, O365, and Meraki integrations which we use in our office and we required software that … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere All of the other products have their strengths and weaknesses. In trying to keep the platform focused on security while keeping the spend contained, we chose AlienVault. Both LogRhythm and Splunk had great solutions, but AlienVault just checked off more of our organizational … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AlienVault provides an all in one/unified approach to security. AlienVaults online threat exchange (OTX) provides additional context to events and event flows that may not originally be seen as a possible threat. The cost of USM and ease to deploy is a big differentiator. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere For us it came down to cost. AlienVault's competitors just could not compare on cost for a small organization like us. They are out of touch. Everyone needs a solid tool like AlienVault, but too often the industry only caters to big budgets. More often than not, that results in … Incentivized Helpful? Vladimir Finkinshtein Information Technology Security Analyst in Information Technology at Resolver Inc. (Computer Software, 201-500 employees) Chose LevelBlue USM Anywhere Easy to deploy, competitive pricing model. Incentivized Helpful? Patrick Noc System Administrator in Information Technology at III (Education Management, 51-200 employees) Chose LevelBlue USM Anywhere The presentation was much better than other products and we felt it will fit with most of the items which we were looking for in SIEM product. Incentivized Helpful? Clark Crain Director of Cyber Security and Networking at First Recovery Group (Hospital & Health Care, 51-200 employees) Chose LevelBlue USM Anywhere I felt that AlienVault performed the SIEM aspect as well as the one mentioned. My opinion has always been that the SIEM product is as good as the person using it is experienced. I selected AlienVault because of the many added features. Incentivized Helpful? Ivan Montilla Miralles Technical Services in Information Technology at GB Advisors, Inc. (Computer & Network Security, 11-50 employees) Chose LevelBlue USM Anywhere AlienVault USM works well for any company size. LogRhythm might be too much if your company is not already big, and the same can be said of McAfee Enterprise Security Manager. If this is your first SIEM, it's a really good choice and has nothing to envy from the others I'm … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere Better price point and ease of use Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AlienVault is generally more affordable than its competitors. It also includes a built-in OpenVAS vulnerability scanner - which most competitors don't have. It is a decent option, but is not as mature of a product as some of the more expensive options like Splunk and LogRhythm. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AlienVault was the only product that spoke to all our needs for log management, vulnerability scans and system monitoring. AlienVault impressed with their knowledge of the security landscape and was able to answer every question to satisfaction. All other competitors could do … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere The price is hard to beat. Very negotiable! Also has more functionality. More bang for your buck! Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AlienVault may be slightly less refined when compared to other enterprise offerings. But in our testing, we found either the cost, licensing model, learning curve, or any combination of the three, made AlienVault's competitors not appropriate for our environment. Over the past … Incentivized Helpful? Terrance Schmitt Senior Network Engineer in Information Technology at Forefront Dermatology (Medical Practice, 201-500 employees) Chose LevelBlue USM Anywhere We liked AlienVault over the other products we looked at due to its lower cost and the number of features it packed into the product. For example, the base package gives you SIEM, Host-based Intrusion Detection (HIDS) via OSSEC, and Network Intrusion Detection via Suricata. … Incentivized Helpful? Steve Smith IT Network and Security Administrator II in Information Technology at New Mexico Mutual (Insurance, 51-200 employees) Chose LevelBlue USM Anywhere To be fair, my last experience with LogRythym was a few years ago but I found it to be incredibly slow performing. Incentivized Helpful?	LogRhythm Verified User Chose LogRhythm NextGen SIEM Platform LogRhythm is heads and tails above AlienVault and more well known and industry-standard compared to InsightIDR. Incentivized Helpful? Ivan Montilla Miralles Technical Services in Information Technology at GB Advisors, Inc. (Computer & Network Security, 11-50 employees) Chose LogRhythm NextGen SIEM Platform AlienVault USM Appliance and USM Anywhere might lack some functionality where LogRhythm does well. For instance, SmartResponse functionality is more mature than the Orchestration rules at AlienVault USM Anywhere. You can easily script SmartResponse to act accordingly to each … Incentivized Helpful? Joel Eng Content Development Lead in Engineering at ReliaQuest (Computer & Network Security, 51-200 employees) Chose LogRhythm NextGen SIEM Platform I work with every SIEM on the market and I believe LogRhythm simply provides the best overall value in terms of price, incident response capability, content capability, and ease of engineering. Incentivized Helpful?
	Would buy again
	No answers on this topic	No answers on this topic
	Delivers good value for the price
	No answers on this topic	No answers on this topic
	Happy with the feature set
	No answers on this topic	No answers on this topic
	Lived up to sales and marketing promises
	No answers on this topic	No answers on this topic
	Implementation went as expected
No answers on this topic	No answers on this topic

Features

LevelBlue USM Anywhere

LogRhythm NextGen SIEM Platform

Comparison of Security Information and Event Management (SIEM) features of LevelBlue USM Anywhere and LogRhythm NextGen SIEM Platform
Feature	LevelBlue USM Anywhere - Ratings	LogRhythm NextGen SIEM Platform 7.4 20 Ratings
Centralized event and log data collection	00 Ratings	9.020 Ratings
Correlation	00 Ratings	8.120 Ratings
Event and log normalization/management	00 Ratings	8.020 Ratings
Deployment flexibility	00 Ratings	4.619 Ratings
Integration with Identity and Access Management Tools	00 Ratings	7.116 Ratings
Custom dashboards and workspaces	00 Ratings	7.520 Ratings
Host and network-based intrusion detection	00 Ratings	7.114 Ratings
Data integration/API management	00 Ratings	8.02 Ratings
Behavioral analytics and baselining	00 Ratings	8.02 Ratings
Rules-based and algorithmic detection thresholds	00 Ratings	7.12 Ratings
Response orchestration and automation	00 Ratings	7.12 Ratings
Reporting and compliance management	00 Ratings	7.03 Ratings
Incident indexing/searching	00 Ratings	7.12 Ratings

User Ratings
	LevelBlue USM Anywhere	LogRhythm NextGen SIEM Platform
Likelihood to Recommend	9.8 (390 ratings)	7.5 (20 ratings)
Likelihood to Renew	7.2 (18 ratings)	9.0 (1 ratings)
Usability	6.7 (34 ratings)	8.0 (2 ratings)
Availability	6.4 (3 ratings)	- (0 ratings)
Performance	7.3 (3 ratings)	- (0 ratings)
Support Rating	7.3 (25 ratings)	8.2 (9 ratings)
In-Person Training	4.5 (1 ratings)	- (0 ratings)
Online Training	8.3 (6 ratings)	- (0 ratings)
Implementation Rating	6.4 (38 ratings)	8.0 (1 ratings)
Configurability	8.0 (3 ratings)	- (0 ratings)
Ease of integration	7.3 (3 ratings)	- (0 ratings)
Product Scalability	6.3 (3 ratings)	- (0 ratings)
Vendor post-sale	7.6 (3 ratings)	- (0 ratings)
Vendor pre-sale	8.2 (3 ratings)	- (0 ratings)