AlienVault USM is ready for making compliance easy, so the value we get as a company is that we make tangible, real progress towards compliance and security management. It also allows to save costs on other tools since it comes with many integrations for every aspect you should take care of as a security administrator.

AlienVault got it right with the integrations of their product, it makes compliance very handy. They selected the best breed of products to integrate in a single console and make it easy to the customer to become fully compliant, be it PCI DSS, DISA STIG, HIPAA, ISO 27002, etc.

If you don't keep it "clean," your console might get cluttered. Sometimes it takes too much RAM if the solution was not properly sized, and can cripple performance, especially if you implemented it as a VM, it can take down performance of other VMs at your hypervisor as well.

Alienvault USM is better and the best SIEM solution interms of financial and also in terms cyber security risk complaince. Build SOC makes it very easy with Alienvault rather going for complicated stuff. A Sensor is installed and looksafter for logs collection and server takes over from there. During Forensics we do have logger which helps us to deep dive in searching the logs. It satisfys most of compaliances like ISO, PCI, SCADA, HIPAA etc...

Alienvault USM had best features in assets discovery, Vulnerability Assessment, IDS and Log monitoring etc.. OTX pulse which is a free service comes at no cost an external threat intelligence tool. Log correlations and retention is very easty in managing and administrations. A lot og inbuilt correlations which is really helpful.

As I said mid-tier comapanys are easy in managing but companys looking for more than ! TB storage and 10000EPS rate cannot be done and adminstration becomes very complecated as half of time require for maintainence of server.

The free version has been a great help in watching our networks. But it has grown old and needs some major updates to compete with other products.

It is free. The best free SIEM out there. Possibly the only one. There are a lot of moving parts that are very good at correlating network security events. The product has become very usable and is great for small companies looking for an entry level SIEM.

Every upgrade is a possible chance for re-building the system. About 80% of the time, the upgrade will break something so badly, you need to re-install and start from scratch. The system slows down considerably when a large number of events are fed in. Their Sales people say the Free version is lightyears behind the commercial version, but from what i can tell, the Free version can be upgraded to the commercial version, so i don't see there being that many differences. The community is weak and there is rarely any input from the developers on the community to help out. So a lot of people try it out and then go somewhere else. While I think it is a great product, it seems to me like it is falling behind in the last few years. There are some more usable and better products in recent years that would make me buy them instead of AV USM.

we wanted to have visibility and insight into our I.T infrastructure.

Good user interface. A very good vulnerability scanner included.

costs a it higher with respect to features available. some time integrations can be a bit tricky. Very Limited trial period of only 15 days, Log Point SIEM offers 60 days trial period in comparison. also MacAfee, Solar Winds also provides 30 days trial period which could be extended.

-THE PRICE FOR UTILITY IS RIDICULOUS. -THE CUSTOMER SUPPORT, IS QUICKLY AND EFFECTIVE. -Detect back doors, exploit, attacks in real time, is perfect for detect every problem on a server. -Is very easy to use! -Alienvault Is a great tool for detect any threat on your system, is a effective and fast software.

-These software is only for a big enterprises, the price is good, but it is not for normal people, is expensive, yes, but is a great tool for detect any threat on any system.