Item: LevelBlue USM Anywhere
Rating: 5
Author: Magdiel Hernandez

Overall Satisfaction with AlienVault USM

Use Cases and Deployment Scope

We use AlienVault as our primary SIEM tool. Our SOC uses the tool to create alerts, monitor suspicious patterns, receive alerting, and investigate security incidents.

Pros and Cons

Pros

Creation of dashboards.
Creation of metrics that we utilize in our monthly reports.
We like the way alerts are being sent to us and the information they provide.

Cons

Their customer supports is the worst, and sadly this has been consistent every time we've had to reach out to them.
The account execs have ZERO flexibility regarding making deals and meeting us halfway.
The features do not work as advertised.

Alternatives Considered

LogRhythm NDR, Splunk Enterprise Security and IBM QRadar

Honestly, pricing is the main reason. AlienVault was already purchased when I was hired as Director, and the company did not have enough budget for anything else. Implementation was subpar, very disappointing, and renewal was a nightmare.

Likelihood to Recommend

While is well suited if you are small organization starting a security practice, AlienVault fails to deliver when it comes to medium or large corporations, as there is very little flexibility from the tool to create alerts. Also, plugins in this time are definitely not the way to go.

Comments

Please log in to join the conversation

Tami Andrews
(Vendor Representative) commented 6 years ago
Thank you Magdiel for providing your feedback & comments. If you'd like to continue the conversation, please do not hesitate to reach out to me at tandrews@alienvault.com and I'll be happy to connect you with the team(s) to discuss the issues you've raised.

AlienVault USM, missing the versatility of the golden days.

Software Version