We just raised a $30M Series A: Read our story

Exabeam Fusion SIEM OverviewUNIXBusinessApplication

Exabeam Fusion SIEM is #4 ranked solution in SOAR tools, #5 ranked solution in top User Behavior Analytics - UEBA tools, and #19 ranked solution in top Security Information and Event Management (SIEM) tools. IT Central Station users give Exabeam Fusion SIEM an average rating of 8 out of 10. Exabeam Fusion SIEM is most commonly compared to Splunk:Exabeam Fusion SIEM vs Splunk. Exabeam Fusion SIEM is popular among the large enterprise segment, accounting for 49% of users researching this solution on IT Central Station. The top industry researching this solution are professionals from a computer software company, accounting for 26% of all views.
What is Exabeam Fusion SIEM?

Exabeam Fusion SIEM is a cloud-delivered solution that that enables you to:

-Leverage turnkey threat detection, investigation, and response
-Collect, search and enhance data from anywhere
-Detect threats missed by other tools, using market-leading behavior analytics
-Achieve successful SecOps outcomes with prescriptive, threat-centric use case packages
-Enhance productivity and reduce response times with automation
-Meet regulatory compliance and audit requirements with ease

Buyer's Guide

Download the Log Management Buyer's Guide including reviews and more. Updated: October 2021

Exabeam Fusion SIEM Customers

Hulu, ADP, Safeway, BBCN Bank

Exabeam Fusion SIEM Video

Pricing Advice

What users are saying about Exabeam Fusion SIEM pricing:
  • "They have a great model for pricing that can be based either on user count or gigabits per day."

Exabeam Fusion SIEM Reviews

Filter by:
Filter Reviews
Industry
Loading...
Filter Unavailable
Company Size
Loading...
Filter Unavailable
Job Level
Loading...
Filter Unavailable
Rating
Loading...
Filter Unavailable
Considered
Loading...
Filter Unavailable
Order by:
Loading...
  • Date
  • Highest Rating
  • Lowest Rating
  • Review Length
Search:
Showingreviews based on the current filters. Reset all filters
YJ
Program Coordinator at a financial services firm with 10,001+ employees
Real User
Good at security logging in our infrastructure but be prepared for problems if you start with a large implementation

Pros and Cons

  • "The user interface and the timelines they use are the most valuable features. The price model is very simple so that one can understand it easily and there are no surprises within it."
  • "We had a large volume right from the beginning and they weren't quite prepared for that. That's something that they should think about when it comes to customers that have a large volume to start off with."

What is most valuable?

The user interface and the timelines they use are the most valuable features. The price model is very simple so that one can understand it easily and there are no surprises within it. 

It's good at security logging in our infrastructure but not really application logging. 

For how long have I used the solution?

We have been using Exabeam for a few months. 

How was the initial setup?

We had RSA earlier, we were a mature client, we had a big bang kind of start. Exabeam was really prepared there. We had some issues that we were able to sort out. They sent very experienced engineers to help us with the issues we had. Now we have a technical account manager. We are very pleased with it. Now, it looks much better but it's a large implementation. If you have a large implementation with lots of data you can expect a few issues and problems. If you start off with a small implementation then it would be a different story. We started off with loads and loads of data that we wanted to ingest. After a couple of months, things look a lot better. 

Which other solutions did I evaluate?

We did a POC with Splunk, IBM QRadar and Securonix and we came to the conclusion that Exabeam was the best option for us. Everybody knows that Splunk is the top product but it's very expensive. The price model is based on the volume of logs of data that you process in the system. It's very unpredictable and expensive compared to other products.

What other advice do I have?

We reviewed four different vendors but before we did the evaluation, we took a deep look at our use cases to understand our requirements so we would know the expected use cases and requirements on the system. It's important to know what you want to use it for. For us, it was about security use cases. If you are a new customer, you should think of the use cases that you have. All of the vendors we evaluated were good but Exabeam has a very good price model. That's where they win when they compete with Splunk, for instance. With Exabeam, you're not restricted to the log volume. You can add as much as you like. The only limit is the hardware. At some point, you may need to extend the hardware. We have plans to increase usage.

I would rate it a seven out of ten. 

We had a large volume right from the beginning and they weren't quite prepared for that. That's something that they should think about when it comes to customers that have a large volume to start off with. That's where they could try to improve their services. We had some issues. Some of it was due to our own load balancing problems that caused a few issues. But if they had had their expert guys on-site they would have found the error much earlier. They didn't have their best experts so I think we lost a big of implementation time. I would've expected more attention on their side. They created tickets but that wasn't the way to work. When you start a large implementation, they need to have their experts on-site as opposed to opening regular tickets. They need to be on-site to fix the issues. They sent very good technical experts after a few months and it only took them half a day to figure out the issues and after that, it worked very well. Our account manager is very senior and we are very pleased with him.

They've been very professional during the POC. We had ongoing commercial discussions. 

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
George Succar
Strategic Account Specialist at FITS Consulting
Real User
Top 5
User-friendly and affordable with good security on offer

Pros and Cons

  • "It's a very user-friendly product and it's a very comprehensive technology."
  • "We still have questions surrounding hardware deployment."

What is our primary use case?

The solution is primarily for the Saudi Arabian government. They want to deploy Exabeam to about 15,000 users. It's for cybersecurity, for protection reasons, within the government environment.

How has it helped my organization?

The government has needed some security features to protect the assets and to protect everything within the environment. This solution offers them the level of protection that they need.

What is most valuable?

The solution has great technology. 

It's a very user-friendly product and it's a very comprehensive technology.

The security on offer is very good. 

Cost-wise, compared to other technology, it's affordable.

The solution has a lot of great premium features on offer. 

What needs improvement?

We still have questions surrounding hardware deployment. 

For how long have I used the solution?

I've been using the solution for about one year.

What do I think about the stability of the solution?

The stability seems to be quite good. We haven't installed it yet, however.

What do I think about the scalability of the solution?

From what I can see, the solution has the capability to scale. that shouldn't be an issue for a company. It looks like it will expand quite well.

How are customer service and technical support?

I haven't been in touch with technical support. The solution hasn't been implemented yet. I've mostly been acquiring information via third parties. 

I tried to send an email, however, no one has replied. I still have outstanding questions about how to select a security management platform, how to select entity analytics, how to select the cloud connectors et cetera, in physical and virtual modes.

It doesn't look like anyone is really supporting the solution in our region. As consultants, it's hard for us to say if this will end up being a problem for clients down the line. We'd like to get their input on the proposal and design, however, there doesn't seem to be anyone to discuss these issues with.

How was the initial setup?

This solution has not been installed yet. Right now, we are in distributing stage. We are trying to assess the requirements and to decide accordingly the proper way forward. We're still figuring out the hardware, for example, and still have questions that need to be addressed. 

What's my experience with pricing, setup cost, and licensing?

I've examined the cost and have found it to be rather reasonable. It's not overly expensive for what it offers.

Which other solutions did I evaluate?

Currently, I'm doing a deep evaluation of this product. I'm making a scoring system and comparing tit o other technologies. This seems to be the best option, however. It seems to be ticking all of the boxes.

What other advice do I have?

We're just a consultant. We give advice to clients and present them with what we think are the best options. I'm not an integrator or user. Our clients rely on our insights and reports.

This solution will potentially be used on a governmental project. We need to have the full set of features. The government is very concerned about protection. We are trying to deploy the data lead, cloud connector, advanced analytics, entity analytics, recounting incident response, case manager and the full package, the full system, in order to collect information and properly detect and respond.

While the scoring is very high so far, I still need to determine the hardware requirements. From what I can see so far, I would rate the solution at an eight out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Flag as inappropriate
Find out what your peers are saying about Exabeam, Splunk, IBM and others in Log Management. Updated: October 2021.
552,695 professionals have used our research since 2012.
MJ
Senior Solutions Architect at a tech services company with 1,001-5,000 employees
Reseller
Top 20
Good tech support and pretty stable but is by no means a complete solution

Pros and Cons

  • "I have customers that like the EUBA functionality of it. The solution has the ability to build a session, basically. It pulls a lot of information together, for example, everything a user does in a specific timeframe. It's quite helpful."
  • "They need to focus on more of the MITRE ATT&CK Framework and coverage. They claim they cover about 70 to 80%. I'm not sure if it's really quite that much, however."

What is our primary use case?

We install this solution for our customers. We don't necessarily use the solution ourselves.

What is most valuable?

I have customers that like the EUBA functionality of it. The solution has the ability to build a session, basically. It pulls a lot of information together, for example, everything a user does in a specific timeframe. It's quite helpful.

What needs improvement?

It's not a complete solution. It really focuses on user behavioral analytics, which is a big part of the product. It doesn't support flow analysis. Not everything is left in logs, to be conveniently reviewed. However, if they had flow analysis, it's possible you can catch a lot of hackers looking at the behavior and network flow. Things need to be cross-correlated with logs. They need real-time flow analysis.

They need to focus on more of the MITRE ATT&CK Framework and coverage. They claim they cover about 70 to 80%. I'm not sure if it's really quite that much, however.

For how long have I used the solution?

I've been using the solution for about a year now.

What do I think about the stability of the solution?

The solution is pretty stable. It's mostly reliable in that we don't really deal with bugs and glitches. 

It's built on SADUP, which is pretty stable. It's a fair to stand up, but they've got that all worked out. You don't have to struggle with getting your Alt stack stood up. They do that for you. 

How are customer service and technical support?

We have reached out to technical support in the past, and it's quite good. We've found them to be very good and very supportive. We're satisfied with the level of support we get from the company.

What about the implementation team?

We handle the implementation ourselves on behalf of our clients.

What other advice do I have?

We're a technology reseller. We're the largest IBM reseller in the world.

We're using the current version of the solution.

I would suggest that other companies looking at implementing the solution to first consider the full breadth of their requirements. It's not a solution with wide-ranging features and capabilities. That said, it does do a lot. They're very good at the user behavioral analytics. If UEBA is a company's main concern, and if they're concerned about insiders, which people should be, it's quite good. It's a strong product for that type of functionality. It doesn't have a lot of breadth beyond that. 

I would rate the solution seven out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
KK
IT Specialist at a tech services company with 51-200 employees
Real User
Top 10
Advanced analytics has a great overview of user behavior

Pros and Cons

  • "The advanced analytics has a really great overview of user behavior."
  • "I believe if it were more flexible it would be a better product."

What is our primary use case?

I'm an IT specialist and we are resellers of Exabeam. We have it deployed as an on-premise demo test cluster for customer POC. We use it mainly for management and for CM use cases to enable an overview of security events as well as user analytics. 

What is most valuable?

With E8, the advanced analytics has a really great overview of user behavior. I like the timeline feature the most.

What needs improvement?

The product could be improved by implementing cost use cases. I believe if it were more flexible it would be a better product. 

For additional features, I'd like to see more visibility in the networking.

For how long have I used the solution?

We've been using the latest version of this product for the past six months. 

What do I think about the stability of the solution?

It's a stable product, no problems. 

What do I think about the scalability of the solution?

Our company doesn't have a huge infrastructure behind the product at the moment, so it's difficult for me to comment about scalability, but I have seen customer references that state it scales really nicely. They are now working on the last big infrastructure and I know that inherently it scales well. The product is mostly for software security use cases, but in our company, only a handful of people use the product, perhaps three or four. In terms of our customers, I would estimate there to be between 10 and 15 users. It would mainly be infrastructure admin and security analysts using the solution.

How are customer service and technical support?

I haven't needed to make contact with technical support. 

Which solution did I use previously and why did I switch?

In production, we are actually still using QRadar in our own company simultaneously with Exabeam.

How was the initial setup?

Setting up the system was relatively easy - it took about a day. Adjusting the information was an ongoing process, so I can't really give a good estimate on that.

Which other solutions did I evaluate?

We evaluated LogRhythm and Splunk as possible options but in the end, we went with Exabeam - it was the right choice for us taking into account the needs of our customers and projected future needs.

What other advice do I have?

I would recommend the product. I don't have any warnings or anything negative to tell anyone, because there are really no problems with the solution. You can pretty much make it up as you go.

I would rate this product an eight out of 10. 

Disclosure: I am a real user, and this review is based on my own experience and opinions.
SD
COO at a computer software company with 11-50 employees
Reseller
Top 10
Easy to use, good integration with AWS, and the incident response functionality works well

Pros and Cons

  • "The way it can connect with AWS is very useful, and the integrations are pretty good."
  • "Adding to the number of certifications that they have, for example, ISO 27001, would be helpful."

What is our primary use case?

We are a solution provider that does a lot of work in the cybersecurity space. Exabeam is one of the SIEM products that we implement for our clients.

What is most valuable?

The solution is easy to use and on a whole, it is pretty valuable.

The way it can connect with AWS is very useful, and the integrations are pretty good.

The incident response functionality is good.

What needs improvement?

Adding to the number of certifications that they have, for example, ISO 27001, would be helpful. Currently, they only have SOC 2.

For how long have I used the solution?

I have been working with Exabeam for the past two to three years.

What do I think about the stability of the solution?

Exabeam is a stable solution.

What do I think about the scalability of the solution?

This product is very easy to scale.

How are customer service and technical support?

I have been in contact with technical support and they're really great. There's always an engineer assigned to each case.

Which solution did I use previously and why did I switch?

The other SIEM solutions that we work with are Securonix and LogPoint.

How was the initial setup?

The initial setup is pretty straightforward. Depending on the size, it usually takes about six days for implementation time.

What's my experience with pricing, setup cost, and licensing?

They have a great model for pricing that can be based either on user count or gigabits per day. The pricing is pretty flexible, as well.

What other advice do I have?

The suitability of this product is dependent on the individual use case, but generally, it fits most clients.

Overall, this is a fantastic tool and it is one of the best SIEMs that I've come across.

I would rate this solution an eight out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
JM
Co-Founder, Director - Technology & Consulting at a tech services company with 11-50 employees
Real User
Top 10
Very good timeline based analytics and user friendly

Pros and Cons

  • "Timeline based analysis; good platform support"
  • "The organzation is rigid and not flexible in the way they operate"

What is our primary use case?

I run a consulting organization and I also do a lot of enterprise architecture and solution architecture for security services.

What is most valuable?

Valuable features are its timeline based analysis and that it's user friendly. Response from the platform itself is good which makes it easy to manage. The UI is also a good feature. 

What needs improvement?

The product is good but the organzation is rigid and not flexible in the way they operate. Their response time is very bad. They obviously have a small team and not enough staff. They have their own priorities, it seems but the customer should be their first priority. The company really needs to improve their commitment to their customers. 

For how long have I used the solution?

I've been using the solution for about four years. 

What do I think about the stability of the solution?

Stability is fine. 

What do I think about the scalability of the solution?

Scalability is fine. 

How are customer service and technical support?

There are no issues with technical support. 

How was the initial setup?

Initial setup is fairly straightforward. 

What's my experience with pricing, setup cost, and licensing?

The pricing is reasonable

What other advice do I have?

From a product perspective, it's a good product but the company needs to improve the way it functions. 

I would rate this solution an eight out of 10. 

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: partner
Buyer's Guide
Download our free Log Management Report and find out what your peers are saying about Exabeam, Splunk, IBM, and more!