Securonix UEBA Reviews

Name: Securonix UEBA
Brand: Securonix Solutions
Rating: 5.0 (4 reviews)

5.0 out of 5

4 reviews
100% willing to recommend

What is Securonix UEBA?

Securonix User and Entity Behavior Analytics (UEBA) leverages sophisticated machine learning and behavior analytics to analyze and correlate interactions between users, systems, applications, IP addresses, and data. Light, nimble, and quick to deploy, Securonix UEBA detects advanced insider threats, cyber threats, fraud, cloud data compromise, and non-compliance. Built-in automated response playbooks and customizable case management work flows allow your security team to respond to threats quickly, accurately, and efficiently

Get the Securonix UEBA Buyer's Guide and find out what your peers are saying about Securonix UEBA, IBM Security QRadar, Splunk User Behavior Analytics and more!

Securonix UEBA is the #15 ranked solution in top User Entity Behavior Analytics (UEBA) solutions. PeerSpot users give Securonix UEBA an average rating of 10.0 out of 10. Securonix UEBA is most commonly compared to IBM Security QRadar: Securonix UEBA vs IBM Security QRadar. Securonix UEBA is popular among the large enterprise segment, accounting for 62% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 18% of all views.

Helped 842,592 peers since 2012

Featured Securonix UEBA reviews

Yoganantham Theerthagiri

Regional Channel Manager at i2sBusiness Solutions

My primary use case for Securonix UEBA is user threat notification and user behavior analysis The most valuable features of Securonix UEBA include insider threat monitoring, which provides complete visibility of user activities, and next-gen AI-based behavior analytics. The customizable…

Read full review

reviewer1330110

Executive Vice President,Global Head at LTI - Larsen & Toubro Infotech

In terms of scalability, we tested 180,000 events per second with no problems. It is not calculated based on the number of users. In terms of scalability, we calculate security platforms based on events per second. It can be one of the factors, but it is not the determining factor for scalability. Scalability is determined by the number of events that can be processed per second. When looking at enterprise users who are connected to the SOC. An organization can have 100,000 employees, contractors, or staff, but that is not how the same solutions are allocated. In that organization, based on assets, end users, endpoint network devices, and so on and so forth, the result will be events per second. In terms of the same tool usage, the same tool or Securonix tool will be used only by the number of SOC analysts who are monitoring the entire environment. Nobody else uses it. The data for all employees and staff in that organization is consolidated. That is one way of looking at it, and it is not proportional. The number of employees and security events per second is not a direct correlation factor. We are an MSSP. We use it based on the needs of our customers. We are not using it for our own internal purposes. Based on our customer's requirements we deploy it.

Read full review

Yi Liu

Principal Member of Technical Staff at AT&T

The aggregation library is definitely very comprehensive. It covers a lot of use cases. Also, the feature dashboard is very well organized and intuitive to use. It organizes information on a timeline which is exactly what we need for insider threat future-analysis. Data insights are where we can not only look at items but can visualize the activity trends over a period of time and compare them across organizations. That's very useful for us. The algorithms surface the exact indicators that we need for the purpose of insider threat detection. That is something that we have not always found is the case with other vendors we have evaluated. We consider cyber indicators as part of insider threat detection. We don't look at them in silos. We correlate them and look at them from a holistic point of view. The algorithm for surfacing those relevant indicators is very comprehensive. We almost find everything we need to surface the indicators we want. We're very impressed with that.

Read full review

Securonix UEBA mindshare

As of March 2025, the mindshare of Securonix UEBA in the User Entity Behavior Analytics (UEBA) category stands at 2.5%, down from 4.8% compared to the previous year, according to calculations based on PeerSpot user engagement data.

User Entity Behavior Analytics (UEBA)

PeerAnalyst reports based on Securonix UEBA reviews

Type	Title	Date
Category	User Entity Behavior Analytics (UEBA)	Mar 28, 2025	Download
Product	Reviews, tips, and advice from real users	Mar 28, 2025	Download
Comparison	Securonix UEBA vs IBM Security QRadar	Mar 28, 2025	Download
Comparison	Securonix UEBA vs Rapid7 InsightIDR	Mar 28, 2025	Download
Comparison	Securonix UEBA vs Exabeam	Mar 28, 2025	Download

Title	Rating	Mindshare	Recommending
IBM Security QRadar	4.0	12.1%	90%	207 interviews Add to research
Splunk User Behavior Analytics	4.1	10.2%	100%	23 interviews Add to research

Valuable Features

Securonix UEBA features a comprehensive aggregation library covering various use cases. The intuitive feature dashboard organizes information on a timeline for insider threat analysis. Data insights allow visualizing activity trends and comparing them across organizations. UEBA stands out with its algorithms for detecting anomalies and threats, customizable analytics dashboard, and next-gen AI-based behavior analytics. Insider threat monitoring provides complete visibility of user activities, making it distinct in the behavior analysis landscape.

"The most valuable features of Securonix UEBA include insider threat monitoring, which provides complete visibility of user activities, and next-gen AI-based behavior analytics."
"The most valuable features of Securonix UEBA include insider threat monitoring, which provides complete visibility of user activities, and next-gen AI-based behavior analytics."
"Their user and entity behavior analysis algorithms are the most valuable features."

Room for Improvement

Securonix UEBA requires enhancement in its algorithms, as users often identify opportunities for new developments. Reporting capabilities need more focus, as this area is perceived as lacking attention. Integration aspects also demand improvement, particularly with EDRs and various technology tools, where users feel that better collaboration with other packages is necessary. These are areas where improvements are frequently anticipated by organizations using Securonix UEBA to address evolving challenges.

"The support system is not very good as of now."
"The integration with other tools, like EDRs and other technology tools, can be improved."
"When compared to others, if you look at the integration aspect, I believe that some aspects of integration can be enhanced."

Pricing

"The cost is approximately $50 per user per year."
"When compared to other solutions, it is less expensive."
"Their pricing is pretty comfortable. They will work with you on the cost."

Popular Use Cases

Organizations primarily utilize Securonix UEBA for insider threat detection, behavioral analysis of users and network traffic, and user activity monitoring. They focus on identifying regular behavior patterns, alerting when unusual activities occur, and addressing potential security threats like lateral movements and ransomware. Use cases include data exportation, account access monitoring, and detecting interactions that exceed normal thresholds. Many adapt Securonix UEBA for multiple malware detections and extensive threat notification tasks.

Service and Support

Customers find the customer service and support of Securonix UEBA varied. Some rate their tech support highly, praising its knowledge and dedication, handling complex environments well. Platinum partners experience excellent support without issues. However, others rate it lower, interacting regularly but dissatisfied with outcomes. Some note the support system as inadequate, despite having teams based locally and in India.

Deployment

Initial setup of Securonix UEBA can be complex due to the technology's nature and the scale involved, requiring synchronization across multiple clusters and nodes. Some describe it as straightforward when guided by documentation, while others find it moderately challenging depending on size. Many utilize a phased approach, beginning with default algorithms, maturing content based on client needs. It is largely accessible to SOC analysts for monitoring purposes, with some rating setup difficulty as eight out of ten.

Scalability

Users find Securonix UEBA horizontally scalable with no limits; they add nodes or clusters as needed. Cloud migration enhances flexibility for on-demand scaling. Businesses accommodating acquisitions anticipate increased usage. Scalability focuses on events per second rather than user count. Organizations with significant user bases like MSSPs deploy it based on client requirements, not internal needs. They rate its scalability favorably.

Stability

Securonix UEBA is very stable according to multiple sources. Users experience occasional errors due to high demand and fluctuating data volume, which can cause temporary overloads. Despite these challenges, the platform remains stable in the back end. Most users report no significant problems and rate its stability highly.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Securonix UEBA Buyer's Guide for additional reliable information.