AlienVault USM Review and how it works for us.
May 10, 2019
AlienVault USM Review and how it works for us.
Score 10 out of 10
Vetted Review
Verified User
Software Version
USM Anywhere (SaaS)
Overall Satisfaction with AlienVault USM
We use AlienVault only in IT department as a SIEM software, is our first place to see what happens with our security.
- The upgrade of the sensors is automatic, which is great! We never had to do nothing extra in that aspect.
- We're always being informed about the new security risks that appear in any place.
- The automatic vulnerability scan of assets is really useful, as we can keep updated about our security risks and can take corrective actions based on those reports.
- We would be glad to see more flexibility to manage the rules, to list all of them, or export them for a more detailed analysis.
- In the same line, a better manager of the alerts would be great. It's complicated to manage events when there are a lot.
- The price could be more friendly.
For us, AlienVault was better than Splunk in many ways. One of them was that AlienVault includes an easier interface and better alert rules. In the case of FortiSIEM, the cost of AlienVault was more competitive, and we were already using OSSEC, so the connection between AlienVault and Ossec was really easier.