Score 9 out of 10
Read Zinnur Dikici, Msc's full review
Likelihood to Recommend
The product integration is very bad on the SIEM platform. We also use IBM Qradar (the same product). While alerts can be sent successfully with Syslog, admin activities cannot be sent successfully. According to us, alert/query flexibility is very successful. Also, data masking is better at alerts, queries or reports. Due to its architecture, the management of all components is very efficient. Database vulnerability scanning with the same agent is also excellent.