ArcSight Analytics vs Exabeam comparison

Read 18 Exabeam reviews

1,403 Views
747 Comparison Views

72% willing to recommend

ArcSight Analytics

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between ArcSight Analytics and Exabeam based on real PeerSpot user reviews.

Find out in this report how the two User Entity Behavior Analytics (UEBA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed ArcSight Analytics vs. Exabeam Report (Updated: January 2025).

ArcSight Analytics vs. Exabeam

Download the complete report

Helped 831,265 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ArcSight Analytics

Ranking in User Entity Behavior Analytics (UEBA)

13th

Average Rating

7.0

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Exabeam

Ranking in User Entity Behavior Analytics (UEBA)

2nd

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Security Information and Event Management (SIEM) (14th), Security Incident Response (6th), Threat Intelligence Platforms (7th), Security Orchestration Automation and Response (SOAR) (7th), AI-Powered Cybersecurity Platforms (9th)

Mindshare comparison

As of January 2025, in the User Entity Behavior Analytics (UEBA) category, the mindshare of ArcSight Analytics is 1.3%, down from 1.5% compared to the previous year. The mindshare of Exabeam is 9.8%, down from 9.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

User Entity Behavior Analytics (UEBA)

Featured Reviews

Syed Ubaid Ali Jafri

Head of Cyber Defense & Offensive Security at Habib Bank Limited

It has improved our system and network policy monitoring

They should improve on the following: * Timely resolution of issues and proper support once a ticket has been generated. * Systems appearing on the network which are not part of the domain controller. These should be monitored. * Inactive connections from servers, which are upgraded or downgraded within a VM, should be automatically revoked. * Logger monitoring should be separated from ESM monitoring. * Ability to integrate with cloud-based applications and monitor cloud-based events. * Ability to log and notify tailored rules via SMS/email. * Provide more ArcSight training and workshops.

Read full review

Stephen-Armstrong

Cyber Security Analyst at Capgemini

The SIEM provides a user-friendly UI experience

When events come into the system, the dashboard categorizes them by the highest risk score, not when they appear on the system. When you've got multiple ongoing incidents you can only see the highest risk score at the top of the list rather than the most recent detection. Exabeam's reporting dashboard could have included a filtering option to filter by the most recent detection.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The two most valuable features of this solution are its stability and scalability."

"The ability to correlate different logs is the solution's most valuable feature."

"Allows multiple integrations with multiple systems in a stable and flexible fashion."

"The solution is easy to implement."

"The most valuable features are that you get lots of connectors, which make it easy to log in to my ASM, and lots of prebuilt roles from the company."

"ArcSight Analytics has improved our system and network policy monitoring."

"The features I have found most valuable are it capabilities for behavioral analytics and anomaly detection."

"This solution makes it easy to create use cases, and it is easy to move queries from use cases to the report to the dashboard."

More ArcSight Analytics pros

"The setup is not difficult. It was easy."

"Timeline based analysis; good platform support"

"The ThreatHunter in Advanced Analytics is the most valuable. It helps analyze compromised assets and provides analysis for any entity within my client's environment."

"I have customers that like the EUBA functionality of it. The solution has the ability to build a session, basically. It pulls a lot of information together, for example, everything a user does in a specific timeframe. It's quite helpful."

"The solution's initial setup process is easy."

"The user interface and the timelines they use are the most valuable features. The price model is very simple so that one can understand it easily and there are no surprises within it."

"The UI was very clean."

"It is user-friendly and quite simple to use."

More Exabeam pros

Cons

"It needs more user analytics and aggregation user queries. And it's slow. When you query over ArcSight, it is very slow."

"I would like to see integration with automation products, such as Phantom Automation."

"Currently, there are no compatible connectors for this solution, which means we have to depend on FlexConnectors."

"It's a difficult product to navigate, it's complex."

"The interactive dashboard is complicated and you need to have training in order to use it, so I think that it could be made easier to use."

"Inactive connections from servers, which are upgraded or downgraded within a VM, should be automatically revoked."

"There is a GUI, but it is not complete and lacks functionality that needs to be performed using the console."

"I faced stability issues with Windows Operating System. The installed connectors hang if they remain idle for a long period of time."

More ArcSight Analytics cons

"Exabeam's reporting dashboard could have included a filtering option to filter by the most recent detection."

"One area for the solution's improvement is integration capabilities, particularly out-of-the-box integration which sometimes requires additional professional services."

"Exabeam needs to improve its adaptive nature towards rules and its capability to understand the entire client environment faster."

"The customer service and support are not satisfactory."

"The solution's reporting and dashboarding could be improved."

"One area that needs improvement is interacting with Exabeam's API. There was a headache regarding the API; the documentation wasn't clear, and the syntax wasn't very precise."

"The organzation is rigid and not flexible in the way they operate"

"The initial setup of Exabeam Fusion SIEM is complex because it needs to integrate with the SIEM solution, but after this is complete it is straightforward."

More Exabeam cons

Pricing and Cost Advice

"The monthly licensing fee is around $20,000. There aren't any costs in addition to the standard licensing fee."

"In addition to the costs of standard licensing fees, there is the cost of labor for maintenance."

"It can range between $30,000 and $40,000 USD, and can go up to $500,000 and $600,000 USD."

"This solution is expensive."

"ArcSight Analytics is a bit expensive compared with other tools in terms of licensing costs, training, hardware implementation, and support."

"My customers pay a yearly licensing fee for ArcSight Analytics."

"Exabeam is not a cheap solution."

"They have a great model for pricing that can be based either on user count or gigabits per day."

"There is an annual license required to use Exabeam Fusion SIEM. The price of the solution should be reduced."

"The solution is expensive."

"The platform is not extremely expensive compared to its direct competitors; I would rate its pricing around six out of ten."

"Exabeam Fusion SIEM's pricing is reasonable."

See which vendors are best for you

Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.

See recommendations

831,265 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Computer Software Company

15%

Financial Services Firm

12%

Manufacturing Company

10%

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

What do you like most about ArcSight Analytics?

ArcSight Analytics is used to get a deeper insight and threat analysis about the network.

What is your experience regarding pricing and costs for ArcSight Analytics?

My customers pay a yearly licensing fee for ArcSight Analytics.

What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?

It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...

What do you like most about Exabeam Fusion SIEM?

The solution's initial setup process is easy.

What is your experience regarding pricing and costs for Exabeam Fusion SIEM?

I do not have much information about the pricing. However, I am aware that Exabeam is cheaper than Palo Alto based on discussions in meetings.

Splunk Enterprise Security vs Exabeam

Comparisons

No data available

Compared 10% of the time

Splunk User Behavior Analytics vs Exabeam

Compared 9% of the time

Cortex XSIAM vs Exabeam

Compared 9% of the time

Microsoft Sentinel vs Exabeam

Compared 8% of the time

Palo Alto Networks Cortex XSOAR vs Exabeam

Compared 7% of the time

More Exabeam Competitors

Product Reports

ArcSight Analytics

Download ArcSight Analytics product report

Download Exabeam product report

Also Known As

ArcSight User Behavior Analytics, ArcSight UBA

No data available

Learn More

OpenText

Overview

ArcSight User Behavior Analytics offers enterprises the ability to monitor and detect from internal and external security threats and fraud.

Exabeam Fusion is a cloud-delivered solution that that enables you to:

-Leverage turnkey threat detection, investigation, and response
-Collect, search and enhance data from anywhere
-Detect threats missed by other tools, using market-leading behavior analytics
-Achieve successful SecOps outcomes with prescriptive, threat-centric use case packages
-Enhance productivity and reduce response times with automation
-Meet regulatory compliance and audit requirements with ease

Sample Customers

Information Not Available

Hulu, ADP, Safeway, BBCN Bank

ArcSight Analytics vs. Exabeam