Exabeam Reviews

Name: Exabeam
Brand: Exabeam
Rating: 3.9 (18 reviews)

Vendor: Exabeam

3.9 out of 5

18 reviews
72% willing to recommend

664 followers

Post review

What is Exabeam?

Exabeam Fusion is a cloud-delivered solution that that enables you to:

-Leverage turnkey threat detection, investigation, and response
-Collect, search and enhance data from anywhere
-Detect threats missed by other tools, using market-leading behavior analytics
-Achieve successful SecOps outcomes with prescriptive, threat-centric use case packages
-Enhance productivity and reduce response times with automation
-Meet regulatory compliance and audit requirements with ease

Get the Exabeam Buyer's Guide and find out what your peers are saying about Exabeam, Wazuh, Splunk Enterprise Security and more!

Exabeam is the #2 ranked solution in top User Entity Behavior Analytics (UEBA) solutions, #5 ranked solution in top Security Incident Response solutions, #5 ranked solution in top AI-Powered Cybersecurity Platforms solutions, #8 ranked solution in top Threat Intelligence Platforms, #8 ranked solution in SOAR tools, and #12 ranked solution in top Security Information and Event Management (SIEM) solutions. PeerSpot users give Exabeam an average rating of 7.8 out of 10. Based on the analysis of the 18 most recent Exabeam reviews, the overall sentiment is positive, with a sentiment score of 6.2. (Among the lowest in the category). Exabeam is most commonly compared to Wazuh: Exabeam vs Wazuh. Exabeam is popular among the large enterprise segment, accounting for 61% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.

Helped 816,406 peers since 2012

Featured reviews

Stephen-Armstrong

Cyber Security Analyst at Capgemini

When events come into the system, the dashboard categorizes them by the highest risk score, not when they appear on the system. When you've got multiple ongoing incidents you can only see the highest risk score at the top of the list rather than the most recent detection. Exabeam's reporting dashboard could have included a filtering option to filter by the most recent detection.

Read full review

Aniruddh Kurundkar

Lead Consultant at Neutrino Tech Systems

The problem I was facing was with the UI when trying to identify the exact services and server names. The UI's left panel was not as informative as I expected. Often, when we needed to retrieve specific information or details, the UI provided a lot of information along with filter criteria. Without the filter criteria, we had to make certain changes in the Exabeam UI. For example, there were three options available to display logs: raw, execution, and view. When selecting "raw," we obtained comprehensive information, but some details were repetitive, such as the server name, service name, method, and agent activities at different times. Although we could access this information, it took time to identify the exact log statement, especially in the case of exception-related log statements. Determining the timestamp at which a particular log was ingested posed a challenge. This improvement will assist our developers in precisely identifying their logs. Even though you have provided a bar to create a customized dashboard for verifying logs of any service, there is still a problem. If a log is generated on the production server, let's say at 8:30 PM IST or at the present time, it takes a few seconds to be ingested into Exabeam Cloud. However, in the company, Exabeam always shows repetitive logs if my log file hasn't been generated. For example, if nothing has been logged or no action has been performed on the application for the past two hours, my log file will be empty. But still, by default, the agent collectors will check the specific location we configured for log ingestion. If that location doesn't contain anything, the logs are displayed on the screen by default. This is why we need to filter and search through numerous timestamps to find the exact location of our logs.

Read full review

Muluken Mekonene

Network Engineer at Insa

Since I have the guides and tutorials on installing Exabeam Fusion SIEM for a virtual environment, the initial setup was easy for me. If you are new to Exabeam Fusion SIEM and reading the resource for the first time, it may take hours. However, since I have read every installation detail and am ready with every resource and material, it now takes me less than an hour.

Read full review

Exabeam mindshare

Product category:

As of November 2024, the mindshare of Exabeam in the Security Information and Event Management (SIEM) category stands at 1.1%, down from 1.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Key learnings from peers

Last updated Nov 13, 2024

Valuable Features

Exabeam offers advanced analytics with user behavior insights, a user-friendly interface, and timeline creation for security investigations. Its automation and integration capabilities are beneficial, alongside strong security logging and identity management. The seamless integration with AWS and affordable pricing add value. Features like behavior analytics, machine learning, and a clear dashboard enhance threat detection and monitoring. Users appreciate its straightforward search functionality and robust analytics, which simplify complex tasks and improve efficiency.

"Exabeam has improved our organization by speeding up the investigation process."
"The most valuable feature of Exabeam is the timeline creation based on log sources, which helps in security investigations."
"The ThreatHunter in Advanced Analytics is the most valuable. It helps analyze compromised assets and provides analysis for any entity within my client's environment."

Room for Improvement

Exabeam users express a desire for improved flexibility, better customer service, and faster response times. They seek enhanced API interaction, real-time flow analysis, and more integration capabilities with platforms like AWS. Users also mention the need for clear documentation and customizable dashboards. Addressing the high number of false positives, enhancing security features, and increasing adaptability are critical areas. Improving user interface clarity, expanding certification, and refining data analysis features are further recommended.

"The customer service and support are not satisfactory."
"Exabeam needs to improve its documentation and provide more customization for dashboards and case management."
"Exabeam needs to improve its adaptive nature towards rules and its capability to understand the entire client environment faster."

ROI

Exabeam Fusion SIEM is utilized by financial institutions' clients who express positive feedback, indicating an ROI. The solution is rated seven out of ten for ROI. It contributes to cost reduction by consolidating monitoring tools, which may reduce operational expenses by 15-20%. Users report excellent performance but are not aware of the pricing and budget details.

Pricing

Exabeam's pricing is generally considered reasonable and flexible, offering models based on user count or gigabits per day. Users find the annual licensing costs manageable, though some suggest a price reduction. Compared to competitors, it is not overly expensive, with ratings typically between six and seven out of ten for cost. There are no additional expenses beyond the licensing fee, and Exabeam is perceived as more affordable than some rivals like Palo Alto.

"Exabeam is not a cheap solution."
"The platform is not extremely expensive compared to its direct competitors; I would rate its pricing around six out of ten."
"The solution is expensive."

Popular Use Cases

Exabeam is primarily utilized for cybersecurity by managing security information and event management (SIEM), user analytics, and anomaly detection. Entities deploy it for incident investigation, user behavioral analysis, and log aggregation across multiple services. Users integrate Exabeam with cloud platforms like Azure and AWS for seamless data collection and security rule triggering. It enhances security operations by parsing logs from various vendors, enabling timeline analysis for incident detection and investigation.

Service and Support

Exabeam's customer service receives mixed feedback. Some users find technical support helpful and responsive, with satisfactory assistance and quick setup responses, like account provisioning. However, others experience slow response times and unresolved issues, particularly with regional support gaps. User sentiment varies, as some praise the supportive, problem-solving approach, while others express dissatisfaction due to missed communications and lack of timely assistance. Logging tickets with Exabeam is straightforward, but concerns remain around promptness and issue resolution.

Deployment

Exabeam's setup process is generally perceived as straightforward, yet varies with implementation size. Larger deployments may encounter issues, often resolved with experienced engineer assistance. Smaller or well-prepared environments find the process easier. Familiarity with similar systems aids in smoother execution, though complexity arises when integrating with existing SIEMs. Documentation and resources support ease of setup, though real-time log filtering could be improved for better efficiency.

Scalability

Exabeam demonstrates strong scalability capabilities, accommodating a range of user counts and being easy to scale. Organizations experience varying levels of performance, with some noting issues when adding filtering criteria and others encountering latency. While some rate its scalability lower, others rank it higher, citing enterprise readiness. Companies report successful user expansions, and its SaaS structure helps alleviate scaling issues. However, defining tags and hierarchy is crucial for comprehensive environment coverage.

Stability

Exabeam is generally stable, built on SADUP, minimizing bugs and glitches. Most users rate stability between 7-9 out of 10. Some handle large data volumes, facing occasional downtime and processing delays. Patching can lead to brief console downtime, impacting monitoring, but these issues are infrequent. Users mention stability is good with slight improvements needed in processing speed and patch application. Stability has been consistently reliable over the last several months.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Exabeam Buyer's Guide for additional reliable information.