LevelBlue USM Anywhere vs. Splunk Enterprise Security

LevelBlue USM Anywhere

733 Reviews and Ratings

Splunk Enterprise Security

253 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
LevelBlue USM Anywhere	Score3.6 out of 10	N/A	The LevelBlue USM Anywhere XDR platform (replacing the former AlienVault USM) delivers threat detection, incident response, and compliance management.	$1,075 per month
Splunk Enterprise Security	Score9.7 out of 10	N/A	Splunk Enterprise Security is an analytics-driven SIEM that helps to combat threats with actionable intelligence and advanced analytics at scale.	N/A

Pricing

LevelBlue USM Anywhere

Splunk Enterprise Security

Essentials: $1,075
per month
Standard: $1,695
per month
Premium: $2,595
per month

No answers on this topic

Pricing Offerings
LevelBlue USM Anywhere	Splunk Enterprise Security
Free Trial
Yes	No
Free/Freemium Version
Yes	No
Premium Consulting/Integration Services
Yes	No

Optional

No setup fee

—

—

Community Pulse
Key User Insights
	LevelBlue USM Anywhere	Splunk Enterprise Security
Considered Both Products	LevelBlue Verified User Chose LevelBlue USM Anywhere We already had familiarity with the platform but we needed cloud support so we upgraded to USM. We reviewed a few other options but decided USM was the best fit our requirements and price point. Incentivized Helpful? Xiaotong Song Business Analyst in Corporate at 3M (Cosmetics, 10,001+ employees) Chose LevelBlue USM Anywhere Compared to the main competitor's products, the AlienVault USM is particularly good in terms of cost effectiveness. Your company does not need to spend a huge amount of money in the first place just to test out the result. By using AlienVault USM, you can also get great support … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere Splunk's ES is a paid add-on on top of an already pricey product. Finding a MSSP that supports Splunk and isn't a 6 figure annual commitment seems unlikely. LogRhythm did not have a cloud-based solution when we were considering SIEMs. Fantastic product though and have a good … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere Balancing what each product had to offer, the grade of difficulty of implementation and the investment it represented for our company AlienVault came out as the better option for our infrastructure. Incentivized Helpful? Fintan O'Meara IT Infrastructure Manager in Information Technology at Version 1 (Information Technology and Services, 1001-5000 employees) Chose LevelBlue USM Anywhere Easy to implement out of the box with good return on investment very early on in the process. Good price point orginally compared to some of the other enterprise products. Good support, responsive to requests for specific features, etc. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AlienVault provides a much more comprehensive solution and is much easier to use and configure. Incentivized Helpful? Jesse Bickel Sr. Project Manager in Information Technology at CaptureRX (Hospital & Health Care, 51-200 employees) Chose LevelBlue USM Anywhere Alienvault was the most aggressive in their pricing and marketing of ease of deployment. The ease of deployment was what really aided in their ability to win our business. The ROI was worth the investment for our security at the time. Also being a market leader aided in our … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AlienVault seems to have a better UI and easier integration than the rest of the products. The price was slightly lower and had more features/easier integrations with external components. Overall AlienVault was selected based on the SOC 2 requirements we needed to fill. When … Incentivized Helpful? Magdiel Hernandez Director of Cyber Security in Information Technology at Best Day Travel Group (Hospitality, 1001-5000 employees) Chose LevelBlue USM Anywhere Honestly, pricing is the main reason. AlienVault was already purchased when I was hired as Director, and the company did not have enough budget for anything else. Implementation was subpar, very disappointing, and renewal was a nightmare. Incentivized Helpful? Frank DePaola Head of Information Security in Corporate at EnPro Industries (Mechanical or Industrial Engineering, 5001-10,000 employees) Chose LevelBlue USM Anywhere With the exception of Solar Winds, AlienVault USM is far easier to administer and support, but far less extensible. LogRhythm and Splunk are going to offer far more advanced capabilities in the way of deployment models, features, and automation capabilities. Also, other … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere We stayed with AlienVault because we were already using them and the pain of switch wasn't worth it for the small gains we'd achieve. But after the purchase by AT&T, we will seriously rethink this. Incentivized Helpful? Jeremy Wilkins Security Administrator in Information Technology at OFS (Furniture, 1001-5000 employees) Chose LevelBlue USM Anywhere Alienvault USM is a security-focused platform. Splunk is a complete operational intelligence platform that can be used for security. Dollars to Dollars Alienvault USM was a no brainer for our security deployment. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AlienVault had the right price for the services we needed. Incentivized Helpful? Kirk Fischer Internal Auditor in Finance and Accounting at Tennessee Farmers Cooperative (Farming, 201-500 employees) Chose LevelBlue USM Anywhere AlienVault USM, while maybe not as feature-rich as some of its competitors, was a known commodity in the SIEM space and one our company felt very comfortable with given its competitive pricing. Incentivized Helpful?	Cisco Verified User Chose Splunk Enterprise Security AlienVault is much more user and beginner friendly, however Splunk ES very much so provides more capability for mass data manipulation, report and dashboard customization, and trend analytics. Incentivized Helpful? Verified User Chose Splunk Enterprise Security Splunk does not hide its correlation and analytics logic from users as much as other solutions in the same space. While some features are harder to access the underlying information is all accessible and tunable. This gives Splunk an edge over other solutions that lock the … Incentivized Helpful? Holt Archer senior security engineer in Information Technology at infobip (Telecommunications, 1001-5000 employees) Chose Splunk Enterprise Security In my experience with Splunk Enterprise Security, the SIEM is far superior to my experience with Alienvault or Security Onion. Splunk Enterprise Security is FAR more stable, extensible, functional, easy to set up, and easier to use than either of these tools, so much so that I … Incentivized Helpful?
	Would buy again
	No answers on this topic	No answers on this topic
	Delivers good value for the price
	No answers on this topic	No answers on this topic
	Happy with the feature set
	No answers on this topic	No answers on this topic
	Lived up to sales and marketing promises
	No answers on this topic	No answers on this topic
	Implementation went as expected
No answers on this topic	No answers on this topic

Features

LevelBlue USM Anywhere

Splunk Enterprise Security

Comparison of Security Information and Event Management (SIEM) features of LevelBlue USM Anywhere and Splunk Enterprise Security
Feature	LevelBlue USM Anywhere - Ratings	Splunk Enterprise Security 8.4 102 Ratings
Centralized event and log data collection	00 Ratings	9.3100 Ratings
Correlation	00 Ratings	8.699 Ratings
Event and log normalization/management	00 Ratings	8.5100 Ratings
Deployment flexibility	00 Ratings	8.3101 Ratings
Integration with Identity and Access Management Tools	00 Ratings	7.896 Ratings
Custom dashboards and workspaces	00 Ratings	9.2102 Ratings
Host and network-based intrusion detection	00 Ratings	7.996 Ratings
Data integration/API management	00 Ratings	8.498 Ratings
Behavioral analytics and baselining	00 Ratings	7.795 Ratings
Rules-based and algorithmic detection thresholds	00 Ratings	8.596 Ratings
Response orchestration and automation	00 Ratings	7.087 Ratings
Reporting and compliance management	00 Ratings	8.695 Ratings
Incident indexing/searching	00 Ratings	9.2101 Ratings

User Ratings
	LevelBlue USM Anywhere	Splunk Enterprise Security
Likelihood to Recommend	9.8 (390 ratings)	8.9 (103 ratings)
Likelihood to Renew	7.2 (18 ratings)	9.0 (3 ratings)
Usability	6.7 (34 ratings)	7.5 (2 ratings)
Availability	6.4 (3 ratings)	9.1 (1 ratings)
Performance	7.3 (3 ratings)	8.2 (1 ratings)
Support Rating	7.3 (25 ratings)	6.6 (6 ratings)
In-Person Training	4.5 (1 ratings)	9.1 (1 ratings)
Online Training	8.3 (6 ratings)	8.2 (1 ratings)
Implementation Rating	6.4 (38 ratings)	9.1 (1 ratings)
Configurability	8.0 (3 ratings)	7.3 (1 ratings)
Contract Terms and Pricing Model	- (0 ratings)	7.3 (1 ratings)
Ease of integration	7.3 (3 ratings)	6.4 (1 ratings)
Product Scalability	6.3 (3 ratings)	9.3 (100 ratings)
Professional Services	- (0 ratings)	9.1 (1 ratings)
Vendor post-sale	7.6 (3 ratings)	8.2 (1 ratings)
Vendor pre-sale	8.2 (3 ratings)	8.2 (1 ratings)