Lumu vs Vectra AI comparison

Read 45 Vectra AI reviews

5,133 Views
2,624 Comparison Views

97% willing to recommend

Lumu

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Vectra AI and Lumu are competitors in the cybersecurity sector. Lumu has the upper hand with superior features and dynamic threat management despite higher costs.

Features: Vectra AI offers advanced threat detection, robust network monitoring, and comprehensive data analytics. Lumu delivers fast threat identification, actionable intelligence, and real-time threat intelligence.

Room for Improvement: Vectra AI needs better real-time alerting algorithms, streamlined integration processes, and more intuitive configuration settings. Lumu could enhance data consolidation, expand compliance reporting capabilities, and improve data correlation features.

Ease of Deployment and Customer Service: Vectra AI provides easy deployment with comprehensive customer support aiding integration. Lumu allows quick deployment but has mixed customer service feedback, offering flexible deployment models.

Pricing and ROI: Vectra AI is seen as having favorable pricing with positive ROI perceptions. Lumu, despite a higher initial setup cost, is valued for its features and intelligence, providing satisfactory ROI due to its effective threat management.

To learn more, read our detailed Lumu vs. Vectra AI Report (Updated: March 2025).

Download the complete report

Lumu vs. Vectra AI

March 2025

Helped 849,190 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Lumu

Ranking in Intrusion Detection and Prevention Software (IDPS)

10th

Ranking in Network Detection and Response (NDR)

8th

Ranking in Extended Detection and Response (XDR)

17th

Average Rating

9.4

Reviews Sentiment

7.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Vectra AI

Ranking in Intrusion Detection and Prevention Software (IDPS)

3rd

Ranking in Network Detection and Response (NDR)

2nd

Ranking in Extended Detection and Response (XDR)

15th

Average Rating

8.6

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Identity Threat Detection and Response (ITDR) (10th), AI-Powered Cybersecurity Platforms (6th)

Mindshare comparison

As of April 2025, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Lumu is 3.6%, up from 0.7% compared to the previous year. The mindshare of Vectra AI is 11.3%, up from 10.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Intrusion Detection and Prevention Software (IDPS)

Featured Reviews

Juan Solano

IT Director at Atlantic Quantum Innovations

Protects against threats and handles it in time with moderate pricing

Mostly, Lumu is an automatic tool. We'll deploy on firewalls and DNS servers. Lumu detects every attack on our network. The other day, we had CLC, the command controller, and the tool reacted automatically. It detected the attack and immediately blocked it without intervention from my team. The improvement is in the security process, as it's now entirely automated. We no longer require a technician or engineer to monitor our network 24/7. Lumu updates with AI and global threat intelligence, which greatly assists us. Since our workload is lighter, Lumu handles all of our tasks. We're using FortiGate for the firewall and Kaspersky for endpoints. If you are going to Lumu, you need another solution for the endpoint. You need to integrate with other tools like firewalls or another antivirus. I recommend the solution based on the price, usability, and service offered by the solution. Overall, I rate the solution a nine out of ten.

Read full review

Mohammad Alkurdi

Owner at Fortibits

Innovative detection features enhance monitoring

The advantages of the integration are not entirely out-of-the-box. You have to do it manually. When I'm doing tier response, an out-of-the-box solution is not available. You need to have a Linux server, and from the Linux server, you must perform AI tasks, and there is a lot to be handled in the back end. This is a major consideration about them. The recall feature, if it can be placed in some areas instead of the cloud, and charged for, would be better. Recall the storage where you watch all the traffic, and you can recall it and try to analyze it in the back end. It’s cloud-based. If they offer it on-prem, it would be better. I think they have a solution, but I have never tested it, to be honest with you.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The tool's support team helps partners resolve any problems with the product."

"Most of it is automated, so I do not have to watch it to get alerts."

"You can access external links, playbooks, MITRE Matrix, and a lot of information."

"Lumu protects against threats immediately and handles them in time."

"I like Lumu's simple user interface. When we deployed it, we got full access, allowing us to identify IP addresses on the network and connect machine names to users. It helped us identify and block threats via the firewall. I also appreciate the chat support and ticket closure process. We're currently reviewing network detection solutions, and my recommendations include Lumu, Sentinel, and a few others. Regarding functionality and user-friendliness, I would recommend Lumu over the others."

"The context provided by the tool is very complete, it includes the miter matrix, playbooks, links, hashes, and much more."

"It's been helpful for overall extended network visibility."

"It provides various dashboards that facilitate the identification of connections and can detect data exfiltration, meaning data sent from your environment to another."

"The solution's ability to reduce alerts, by rolling up numerous alerts to create a single incident or campaign, helps in that it collapses all the events to a particular host, or a particular detection to a set of hosts. So it doesn't generate too many alerts. By and large, whatever alerts it generates are actionable, and actionable within the day."

"It is doing some artificial intelligence. If it sees a server doing a lot of things, then it will assume that is normal. So, it is looking for anomalous behavior, things that are out of context which helps us reduce time. Therefore, we don't have to look in all the logs. We just wait for Vectra to say, "This one is behaving strange," then we can investigate that part."

"Vectra is very compatible with various cloud providers, such as Amazon and Azure AD. This is helpful as customers often migrate their network infrastructure to the cloud."

"One of the most valuable features is all the correlation that it does using AI and machine learning. An example would be alerting on a host and then alerting on other things, like abnormal behavior, that it has noticed coming from the same host. It's valuable because we're a very lean team."

"The fact that we get the visualization of what's happening on our network, which is a way of improving our security in-depth is most valuable."

"We often use the new feature to create PCAP files from the whole data traffic. It makes it much easier to find network problems such as whether the server is responding to a request. It has nothing to do with security, but it helps a lot to find other problems."

"The core product provides excellent visibility, but my favorite feature is Vectra Recall."

More Vectra AI pros

Cons

"The free version is minimal compared to the full version."

"It would be good if we could access the physical logs."

"The reports need improvement."

"Nothing so far needs to be improved."

"Lumu's ability to discover threats is an area of concern where improvements are needed."

"The integration with different vendors and endpoints could be improved."

"I am happy with the current features. However, one important one is to improve the reports."

"One thing which I have found where there could be improvement is with regard to the architecture, a little bit: how the brains and sensors function. It needs more flexibility with regard to the brain. If there were some flexibility in that regard, that would be helpful, because changing the mode of the brain is complex. In some cases, the change is permanent. You cannot revert it."

"In comparison with a lot of systems I used in the past, the false positives are really a burden because they are taking a lot of time at this moment."

"We have a lot of system solutions and integrations with system solutions. Vectra is a type of black box. It implements AI-informed detection mechanisms, but we cannot create system detections. I understand that the product is designed this way, but it would be great if we could create our own detections as well."

"They use a proprietary logging format that is probably 90% similar to Bro Logs. Their biggest area of improvement is finishing out the remaining 10%. That 10% might not be beneficial to their ML engine, but that's fine. The industry standard is Zeek Logs or Bro Logs, or Bro or Zeek, depending on how old you are. While they have 90% of those fields, they're still missing some fields. In very rare instances, some community rules do not have the fields that they need, and we had to modify community rules for our logs. So, their biggest area of improvement would be to just finish their matching of the Zeek standard."

"I would like more integrations with IOCs and threats currently on the Internet. I would also like to know which threats are based on zero-day attacks, current botnets, etc. Therefore, I would like more information on external threats."

"It would be commercially beneficial if Vectra AI had something like Darktrace's Antigena Email or something similar to email protection."

"We would like to see more information with the syslogs. The syslogs that they send to our SIEM are a bit short compared to what you can see. It would be helpful if they send us more data that we can incorporate into our SIEM, then can correlate with other events."

"I would like to see data processed onshore. Right now, the cloud components, like Office 365, must be processed on servers outside of Australia. I would like to see a future adoption of onshore processing."

More Vectra AI cons

Pricing and Cost Advice

"It is the cheapest solution we found."

"The tool is available at a good price. The tool offers a good and competitive price for customers."

"Compared to Lumu, other solutions are more expensive. SentinelOne was a bit cheaper, and another provider's price structure is unclear, but Lumu fit our budget nicely. SentinelOne's cost depends on the number of devices, and it might be similar to Lumu's, depending on deployment."

"It is an expensive solution, but it's not the most expensive we've seen. We also know how much we're going to pay, unlike with some other providers where all of a sudden our license explodes."

"My company pays for the Vectra AI licensing fee yearly. I know the figure because my company recently renewed the license, and it's okay, at least for the financial sector."

"The upfront pricing model that we have would have been more beneficial if it had been a recurring license fee, but that wasn't a massive issue for us. It's fairly priced."

"Vectra AI's pricing is cheaper than that of Darktrace."

"The licensing is on an annual basis."

"The solution is low-cost and affordable."

"The pricing is high."

"At the time of purchase, we found the pricing acceptable. We had an urgency to get something in place because we had a minor breach that occurred at the tail end of 2016 to the beginning of 2017. This indicated we had a lack of ability to detect things on the network. Hence, why we moved quickly to get into the tool in place. We found things like Bitcoin mining and botnets which we closed quickly. In that regard, it was worth the money."

More Vectra AI pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.

See recommendations

849,190 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

13%

Computer Software Company

Insurance Company

Comms Service Provider

Financial Services Firm

13%

Computer Software Company

13%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Lumu?

Lumu protects against threats immediately and handles them in time.

What needs improvement with Lumu?

Lumu's ability to discover threats is an area of concern where improvements are needed.

What is your primary use case for Lumu?

My company is currently dealing with Lumu's onboarding process. Lumu is used to monitor the environment permanently and validate if there is ransomware that can exploit our infrastructure.

What is the biggest difference between Corelight and Vectra AI?

The two platforms take a fundamentally different approach to NDR. Corelight is limited to use cases that require the eventual forwarding of events and parsed data logs to a security team’s SIEM or ...

What do you like most about Vectra AI?

The solution is currently used as a central threat detection and response system.

What is your experience regarding pricing and costs for Vectra AI?

It is very acceptable when you compare it with Darktrace, for example.

Stellar Cyber Open XDR vs Lumu

Comparisons

Darktrace vs Lumu

Compared 62% of the time

Compared 10% of the time

Wazuh vs Lumu

Compared 7% of the time

ExtraHop Reveal(x) vs Lumu

Compared 5% of the time

Fortinet FortiGate IPS vs Lumu

Compared 5% of the time

More Lumu Competitors

Darktrace vs Vectra AI

Compared 32% of the time

ExtraHop Reveal(x) vs Vectra AI

Compared 11% of the time

Corelight vs Vectra AI

Compared 7% of the time

Cisco Secure Network Analytics vs Vectra AI

Compared 6% of the time

Arista NDR vs Vectra AI

Compared 6% of the time

More Vectra AI Competitors

Product Reports

Network Detection and Response (NDR)

April 2025

Download Lumu product report

Download Vectra AI product report

March 2025

Also Known As

No data available

Vectra Networks, Vectra AI NDR

Overview

Lumu Technologies is a cyber-security company that illuminates threats, attacks, and adversaries affecting enterprises worldwide. Using actionable intelligence, Lumu provides a radical way to secure networks by enhancing and augmenting existing defense capabilities established over the past 25 years.

Lumu Technologies

Vectra AI is used for detecting network anomalies and potential malicious activities, providing visibility into network traffic and enhancing threat detection across environments.

Organizations deploy Vectra AI mainly on-premises with additional cloud components. It helps with compliance, incident response, security monitoring, detecting insider threats, and correlating network events. Vectra AI captures and enriches network metadata, provides detailed dashboards, reduces false positives, and supports cross-environment behavioral analysis to enhance threat detection and prioritization. While valued for its high accuracy and alert aggregation, it has room for improvement in UI/UX, packet management, and integration with SIEMs and other tools. It is noted for expensive pricing and limited proactive threat response features.

What are Vectra AI's most valuable features?

High accuracy in identifying threat locations
Aggregation of alerts into single incidents
24/7 threat detection
Visibility into the entire attack lifecycle
Risk score aggregation
Effective triaging of alerts
Integration with other tools

What benefits or ROI should users look for?

Enhanced threat detection and prioritization
Comprehensive network visibility
Reduction in false positives
Better incident response capabilities
Improved compliance monitoring

In specific industries, Vectra AI is deployed to monitor complex networks and alleviate challenges in threat detection. It is particularly effective in sectors requiring stringent compliance and security measures, offering insights and capabilities crucial for protecting sensitive data and maintaining operational integrity.

Sample Customers

Information Not Available

Tribune Media Group, Barry University, Aruba Networks, Good Technology, Riverbed, Santa Clara University, Securities Exchange, Tri-State Generation and Transmission Association