getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categoriesBlog & researchAbout us

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

Online SIEM Software

Last updated: February 2026

1 filter applied

Features

Integrated with

Pricing model

Devices supported

Organization types

User rating

63 software options

Heimdal Threat-hunting & Action Center logo

Heimdal Threat-hunting & Action Center

(0)

SIEM and threat intelligence solution

visit website
The Heimdal Threat-Hunting and Action Center is a comprehensive platform that offers advanced features to detect, analyze, and mitigate cyber threats in real-time. With a unified interface and a single pane of glass view, security teams can visualize and monitor their entire digital landscape.

Read more about Heimdal Threat-hunting & Action Center

Users also considered
BusinessLOG logo

BusinessLOG

Log Management AI, New Generation LOG Collector Tools

visit website
Powerful network control and management functions make BusinessLog the new generation of log management and cyber security tools

Read more about BusinessLOG

Users also considered
EventSentry logo

EventSentry

Real-time log & event log hybrid SIEM monitoring solution

visit website
EventSentry is a hybrid SIEM (security information & event management) solution which offers a range of tools including event log monitoring, reporting, health monitoring, compliance management, network monitoring, environment tracking, data consolidation, Active Directory integration & more

Read more about EventSentry

Users also considered
ManageEngine Log360 logo

ManageEngine Log360

Comprehensive SIEM solution

visit website
ManageEngine Log360 is a log management and SIEM (security information and event management) platform which helps businesses to monitor and manage network security, audit Active Directory changes, log devices, and gain visibility into cloud infrastructures.

Read more about ManageEngine Log360

Users also considered
Fidelis Elevate logo

Fidelis Elevate

Extended Detection and Response (XDR) Cybersecurity Platform

visit website
Fidelis Elevate is a cloud-based XDR Solution that delivers endpoint security, network security, deception, and Active Directory protection in a single platform.

Read more about Fidelis Elevate

Users also considered
CloudJacket MDR logo

CloudJacket MDR

Managed Cybersecurity Platform with 24/7 SOC Monitoring

visit website
In today's digital landscape, organizations face an ever-evolving array of cyber threats. Secnap's CloudJacket MDR offers a comprehensive, AI-augmented security solution that combines advanced technology with 24/7 expert monitoring, delivering robust protection.

Read more about CloudJacket MDR

Users also considered
Google Cloud logo

Modular platform for computing, hosting, storage and more

learn more
Google Cloud Platform is a modular-based platform providing multiple build and scale services to businesses of any size within any industry. It offers tools for document storage, data warehousing, security key enforcement, app creation, API management, AI and machine learning, live chat, and more.

Read more about Google Cloud

Users also considered
Datadog logo

Cloud-Scale Monitoring Platform For Dev, Sec, and Ops teams.

learn more
Secure your tech stack with Datadog Security Monitoring's real-time threat detection. Set up key security integrations in minutes; apply OOTB Detection Rules without a query language; and correlate security signals to investigate suspicious activity.

Read more about Datadog

Users also considered
JumpCloud Directory Platform logo

A cloud directory platform for secure access to resources

learn more
Event Logging API tells you exactly who performed what action to what resource, when, and from what location. Integrate this data into SIEM systems.

Read more about JumpCloud Directory Platform

Users also considered
Splunk Enterprise logo

Machine data management and analytics

learn more
Splunk Enterprise is a cloud-based platform designed to assist businesses with big data management and analysis of machine data. Key features include data visualization, performance metrics, data collection, real-time search, indexing, KPI tracking, reporting, and monitoring.

Read more about Splunk Enterprise

Users also considered
SentinelOne logo

Protect your Endpoints, Cloud, and Data

learn more
SentinelOne delivers autonomous cybersecurity powered by AI, enabling real-time prevention, detection, and response to threats across endpoints, cloud workloads, and identity systems—empowering organizations to stay ahead of cyberattacks with speed, visibility, and control.

Read more about SentinelOne

Users also considered
Lookout logo

Endpoint-to-cloud security for businesses with remote teams

learn more
Lookout is an integrated SASE solution that provides endpoint-to-cloud security, enabling remote teams to work from any location while protecting business data. It provides actionable insights that help businesses proactively identify potential threats such as ransomware, phishing attacks, and offensive web content. Lookout is designed to eliminate the need for standalone cybersecurity solutions.

Read more about Lookout

Users also considered
Elastic Stack logo

Distributed search and analytics solution

learn more
Reliably and securely take data from any source, in any format, then search, analyze, and visualize it in real time.

Read more about Elastic Stack

Users also considered
ConnectWise SIEM logo

Threat detection and response management software

learn more
ConnectWise SIEM is a threat detection and response management software designed to help enterprises create, launch, and manage cybersecurity programs. The platform enables organizations to identify potential threats and malicious activities across networks & connected devices via a unified portal.

Read more about ConnectWise SIEM

Users also considered
Sematext Cloud logo

Cloud-based application and infrastructure monitoring tool

learn more
Sematext Cloud is an all-in-one observability tool that helps businesses assess and gain key insights into the front and back-end performance of system applications. Features include real user and synthetic monitoring, transaction tracing, infrastructure monitoring, and log management.

Read more about Sematext Cloud

Users also considered
Sumo Logic logo

Unified Logs & Metrics for Full App Visibility

learn more
Sumo Logic is a log management and data analytics software that creates information based on data feeds. It assesses server, application and website performances by creating graphs and charts. It creates alerts when data reaches certain levels which in turn notify of potential threats/downtime.

Read more about Sumo Logic

Users also considered
Graylog logo

Log Management | SIEM | API Security

learn more
Graylog is an open, AI-powered SIEM that helps security and IT teams detect threats faster, reduce alert noise, and control security data costs across cloud and on-prem environments.

Read more about Graylog

Users also considered
IBM Security QRadar logo

Security information & event management (SIEM) platform

learn more
IBM QRadar SIEM is a security information & event management software for security teams to accurately detect and prioritize threats across the organizations, providing intelligent insights that enable security analysts to respond quickly and reduce the impact of incidents

Read more about IBM Security QRadar

Users also considered
Logz.io logo

Machine data analytics based on ELK and Grafana

learn more
Unified platform for monitoring, troubleshooting and security based on ELK and Grafana.

Read more about Logz.io

Users also considered
Logsign Unified SO Platform logo

Logsign Unified Security Operations Platform

learn more
Logsign Unified SO Platform delivers comprehensive threat detection, investigation, and response (TDIR) through integrated next-gen SIEM, threat intelligence, UEBA, and SOAR capabilities.

Read more about Logsign Unified SO Platform

Users also considered
Blumira logo

Automated SIEM + XDR for IT Teams

learn more
Blumira’s cloud SIEM can be deployed in hours with broad integration coverage across cloud, endpoint protection, firewall and identity providers including Office 365, G Suite, Crowdstrike, Okta, Palo Alto, Cisco FTD and many others.

Read more about Blumira

Users also considered
Elastic Security logo

Security at the speed of Elastic

learn more
Unify SIEM, endpoint security, and cloud security
Elastic Security modernizes security operations

Read more about Elastic Security

Users also considered
ALog Series logo

Server access log solution for finance and manufacturing

learn more
ALog ConVerter is a server logging solution from AMIYA Corporation, promising a new standard in server access monitoring and management for every industry

Read more about ALog Series

Users also considered
LogPoint logo

Accelerate threat detection and response with SIEM and UEBA

learn more
LogPoint's SIEM platform helps businesses secure data from threats & respond to cyberattacks in compliance with regulatory norms.

Read more about LogPoint

Users also considered
USM Anywhere logo

Threat detection and response software for IT security teams

learn more
USM Anywhere is a cloud-based threat detection and response software designed to help IT professionals automatically collect and analyze data across cloud, on-premise, and hybrid environments. Powered by Alien Labs, the platform lets security teams leverage data from leverages from the Open Threat Exchange (OTX) to gain threat intelligence.

Read more about USM Anywhere

Users also considered