Seceon Open Threat Management Platform vs Splunk Enterprise Security comparison

Seceon Open Threat Management Platform vs. Splunk Enterprise Security

Download the complete report

Helped 895,891 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Seceon Open Threat Manageme...

Ranking in Security Information and Event Management (SIEM)

49th

Average Rating

7.8

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Splunk Enterprise Security

Ranking in Security Information and Event Management (SIEM)

1st

Average Rating

8.4

Reviews Sentiment

7.3

Number of Reviews

390

Ranking in other categories

Log Management (1st), IT Operations Analytics (1st)

Mindshare comparison

As of May 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Seceon Open Threat Management Platform is 0.8%, up from 0.7% compared to the previous year. The mindshare of Splunk Enterprise Security is 7.1%, down from 9.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Splunk Enterprise Security	7.1%
Seceon Open Threat Management Platform	0.8%
Other	92.1%

Security Information and Event Management (SIEM)

Featured Reviews

Vaibhav Patkar

CISO at Orient Technologies Pvt. Ltd.

Offers remediation capabilities and provides a bird's-eye view of events happening in your environment, summarizing critical events that need attention

One drawback is that it becomes so easy to use that users may lose the habit of manual checks and balances. As a security person, you should always worry about potential threats. If you have a very useful and easy tool, you might lose the ability to think differently and critically. For example, in a group of ten people, if nine think the same way and one thinks differently, you should consider the tenth person's perspective because they might have valuable insights. Having a great product is not always beneficial because you may become too dependent on it, which can be problematic in the long term. If you lose your critical thinking skills, you might not recognize when something abnormal is happening. While the system will notice, systems can have their own challenges and issues. I'm not criticizing the product itself but emphasizing the importance of not being overly dependent on machines. Similar to what we see with Tesla cars, no matter how advanced, there is always a chance things may not work as expected. So, the users need to prepare for that eventuality. Seceon Open Threat Management Platform has some add-ons that they sell as part of the whole suite, but not individually. If they sold them individually, they could potentially get more business.

Read full review

Sathis-Kumar

Senior Manager at Bank of America

Helps us detect cyber threats quickly and integrate multiple feeds effectively

Overall, the product is good, but when it comes to some infrastructure issues, we have to dig into more logs. There is no straightforward indication of an issue. Health check kind of dashboards are not available. More AI would help us, and more optimization, since security products run more queries. The AI module could suggest solutions, optimizing queries or workload balancing. If the product itself advises on running queries during peak times, it would be similar to what ChatGPT currently offers. We see quite a few issues on stability. Even last week, we faced something, and identifying bottlenecks is not easy. We need more SMEs, and there is no mechanism to tell us about indexer or search head issues. Self-monitoring dashboards could be beneficial. The technical support still requires more improvement. Often, primary support takes a lot of time and forwards most solutions to the engineering side. The primary support team has very limited knowledge to provide.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Seceon Open Threat Management Platform provides a more straightforward implementation that is better than Splunk and offers an AI-based platform with machine learning and deep learning capabilities."

"The most valuable features are behaviour analytics, threat intelligence, endpoint detection, and response features."

"We only recently started using Seceon, so we aren't taking advantage of all its features yet. We have enabled some proactive alerts about utilization and bottlenecks from high traffic."

"The algorithm used in Seceon OTM is clear and logical, categorizing events as needed. This helps us identify and respond to threats effectively."

"The solution is very cost-effective compared to Splunk and LogRhythm."

"The main thing is the value proposition. It is one of the most sophisticated yet affordable solutions that I've come across. It is also one of the easiest-to-manage yet comprehensive solutions for a SOC analyst. Its customizations are really good, and it has a lot of integrations. It is multi-tenant and very fast to onboard. Its stability is 100%. We've never had an outage with it. It doesn't require extensive hardware resources. Its level of support is also very good. They have a very responsive technical team."

"The main thing is the value proposition; it is one of the most sophisticated yet affordable solutions that I've come across, and it is also one of the easiest-to-manage yet comprehensive solutions for a SOC analyst."

"It is effective because it has threat intelligence from across the world and constantly checks and updates for new threats."

More Seceon Open Threat Management Platform pros

"Splunk may be more costly upfront, but in the long run, it saves on time and man-hours."

"We have created a few custom use cases for Splunk that have helped us detect threats faster. For example, we set up endpoint-related data models and specialized setups for various scenarios. It's more efficient than some other products I've used."

"The solution's most valuable feature is risk-based alerting, focusing on building out user risks for individuals throughout the enterprise."

"The ease of use and building queries, specifically SQL queries, is notably beneficial as it is easy to build, and the data model itself is very simple."

"This is a product that I recommend for anybody who wants and advanced SIEM solutions."

"It's basically one of the best SIEM products on the market."

"I would recommend Splunk to any company: small, medium, and large."

"The solution is very fast and succinct."

More Splunk Enterprise Security pros

Cons

"For future releases, integrating incident response tools and improving communication on incident reporting could be beneficial."

"We are at the client’s end, offering services. They don’t know about security rules and benchmarks. We are working on the discovery and remediation but we don’t really have the intelligence that was available while working with other tools. Human working is also very essential for the solution. The automatic session is impossible to play since it needs to touch Redfin for further analysis. No one has breached our clients."

"The SOP they provided wasn't great. They offered training over Sherp Virtualization, and the Seceon leadership visited our location to explain everything in detail, but the documentation and training could be better. It isn't as effective as it could be. There's some room for improvement there."

"It needs more compatibility for co-managed solutions."

"The product should improve the triggering rate."

"It would be better if they offered global coverage."

"The management console could use some enhancements."

"The product could be improved by including sandboxing capabilities in the next release."

More Seceon Open Threat Management Platform cons

"It is a good product, but the Achilles heel for a lot of organizations is the cost model for it because it gets expensive. That's because the model is based on how much data it processes a day, which can be prohibitive, especially if you have a lot of data. A lot of customers may not be ready for the sticker shock on how to fully leverage the product. I realized that the reason for that is that when it was originally designed, it was kind of like a big data modeling application. If they want to have a bigger customer base, they can come out with subsets of their product that are focused on specific things and have different pricing models. It may help with the cost."

"The Enterprise Security app could be improved. We have had trouble with it working from the first day."

"They can incorporate the SOAR solution within the actual product so that we do not require two different products, two different installations, and two different pricing methods. In regards to UBA, I am familiar with the UBA that existed two years ago. I am not updated about it today, but two years ago, UBA required such an amount of data that from a cost perspective, it was not worth it. When you compare it to what you get out of the box with Microsoft Sentinel without additional costs, there is no match."

"It needs more thoroughly tested releases. Every new big version (6, 7, etc.) has had so many bugs that it makes me wary of customers upgrading right away."

"The main dislikes about Splunk Enterprise Security are that we need more highly skilled people and the license for Splunk Enterprise Security is costly."

"Missing capability for audio/video and image processing."

"There are new services which are coming up. If Splunk can catch up with the speed of Amazon, and with the integration, instead of us waiting for another year or so, that would be good."

"We've sometimes faced issues with upgrades. The incident review dashboard sometimes breaks after updates. When we add a space or something in the description or anywhere in the SQL, the drill-down value may be reset with a blank value. Before rolling out any software, they should test it thoroughly and ensure clients won't have issues with the upgraded version. It should be compatible with all or most of the apps. All major issues must be addressed before rolling out the upgrade."

More Splunk Enterprise Security cons

Pricing and Cost Advice

"It has a per-asset model instead of an ingestion-based model, which gives predictable pricing. In terms of price, it is in the middle to lower range of SIEMs that it competes against. It is the most affordable solution that we have implemented so far. It was much more affordable than anything else I've implemented."

"The pricing is very competitive. It's not expensive."

"I find Seceon OTM's pricing to be reasonable, not too high or low, just okay for the market standards. I can't disclose specific figures, we pay on a quarterly basis under a service model. I would rate it eight out of ten. As a customer, I always hope for better pricing options."

"The price is quite reasonable."

"Seceon Open Threat Management Platform is cost-effective because it's a comprehensive platform that offers high availability."

"We used the solution's trial version for two months and later purchased it."

"The solution is cheap and very competitive. It offers good tuning in terms of the pricing. Other solutions like Palo Alto and IBM are more expensive."

"It's a yearly subscription."

"The price of this solution is expensive. However, it has great features. If you want a great solution you need to pay a price matching the features."

"Splunk Enterprise Security is not a cheap product, but I think it is worth every dollar that you pay."

"The solution is a little expensive."

"The solution is costly."

"Splunk Enterprise Security is cheaper than competitors, but I do not know whether it is just our contract."

"Free Splunk license for PoCs on personal machines and the ability to scale the PoC to an enterprise level app."

"The pricing of Splunk Enterprise Security is somewhat high, but comparing it with its benefits, it's acceptable. It depends on the type of business."

More Splunk Enterprise Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

895,891 professionals have used our research since 2012.

Comparison Review

Vinod Shankar

Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees

Feb 26, 2015

HP ArcSight vs. IBM QRadar vs. McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm

We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…

Read full review

Top Industries

By visitors reading reviews

Manufacturing Company

11%

Computer Software Company

11%

Financial Services Firm

Outsourcing Company

Financial Services Firm

14%

Manufacturing Company

Computer Software Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	5
Large Enterprise	1

By reviewers
Company Size	Count
Small Business	120
Midsize Enterprise	51
Large Enterprise	270

Questions from the Community

What is your experience regarding pricing and costs for Seceon Open Threat Management Platform?

The pricing of Seceon Open Threat Management Platform is very reasonable.

What needs improvement with Seceon Open Threat Management Platform?

There are areas for improvement in the customization options. Every ( /products/every-reviews ) quarter, they are developing the platform with new updates based on feedback provided.

What is your primary use case for Seceon Open Threat Management Platform?

We are a Managed Security Service Provider (MSSP ( /categories/managed-security-services-providers-mssp )), and we provide services to our customers.

What SOC product do you recommend?

For tools I’d recommend: -SIEM- LogRhythm -SOAR- Palo Alto XSOAR Doing commercial w/o both (or at least an XDR) is asking to miss details that are critical, and ending up a statistic. Also, rememb...

What is a better choice, Splunk or Azure Sentinel?

It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...

How does Splunk compare with Azure Monitor?

Splunk handles a high amount of data very well. We use Splunk to capture information and as an aggregator for monitoring information from different sources. Splunk is very good at alerting us if we...

Microsoft Sentinel vs Seceon Open Threat Management Platform

Comparisons

Compared 12% of the time

IBM Security QRadar vs Seceon Open Threat Management Platform

Compared 11% of the time

DNIF HYPERCLOUD vs Seceon Open Threat Management Platform

Compared 7% of the time

LogRhythm SIEM vs Seceon Open Threat Management Platform

Compared 6% of the time

Fortinet FortiSIEM vs Seceon Open Threat Management Platform

Compared 5% of the time

More Seceon Open Threat Management Platform Competitors

IBM Security QRadar vs Splunk Enterprise Security

Compared 8% of the time

Sentinel vs Splunk Enterprise Security

Compared 5% of the time

Wazuh vs Splunk Enterprise Security

Compared 3% of the time

Elastic Security vs Splunk Enterprise Security

Compared 3% of the time

Dynatrace vs Splunk Enterprise Security

Compared 2% of the time

More Splunk Enterprise Security Competitors

Product Reports

Seceon Open Threat Management Platform

Download Seceon Open Threat Management Platform product report

Seceon Open Threat Management Platform report

Splunk Enterprise Security

Download Splunk Enterprise Security product report

Also Known As

Seceon OTM, Seceon aiSIEM, aiSIEM, Seceon Open Threat Management

No data available

Overview

Seceon Open Threat Management Platform offers a blend of cost-effectiveness and ease of use, featuring AI, real-time remediation, and endpoint detection, suitable for sectors like finance and healthcare.

Combining AI-driven analysis with real-time threat remediation, Seceon Open Threat Management Platform provides comprehensive security management. Users value its stability and the absence of hardware requirements. Its features, including XDR/EDR and SOC/SOAR, focus on improving response times and lowering costs. The platform's integration capabilities and genuine alert customization enhance its effectiveness. Designed with businesses in mind, it requires no coding for its pre-built features, streamlining processes like threat hunting and incident monitoring through a single license. However, cloud model development and enhanced training are needed, and it entails high costs for smaller enterprises.

What are the most important features?

Artificial Intelligence: Improves threat detection accuracy.
Real-Time Remediation: Automates threat response actions.
Behavior Analytics: Identifies abnormal activities efficiently.
Endpoint Detection: Guards against endpoint vulnerabilities.
Integration Capabilities: Connects with a range of security tools.

What benefits or ROI should users look for?

Cost Reduction: Lowers operational expenses via AI automation.
Quick Onboarding: Accelerated deployment process.
Improved Response Time: Faster threat mitigation.
Minimized Hardware Needs: Decreases infrastructure costs.

Banks and managed security service providers deploy Seceon Open Threat Management Platform to centralize threat management and analysis. In healthcare and finance, it streamlines SIEM management and ensures compliance, leveraging its AI capabilities to provide efficient endpoint protection and enhance security operations. Despite needing better global coverage and management enhancements, it helps manage security events quickly and effectively.

Seceon

Splunk Enterprise Security delivers powerful log management, rapid searches, and intuitive dashboards, enhancing real-time analytics and security measures. Its advanced machine learning and wide system compatibility streamline threat detection and incident response across diverse IT environments.

Splunk Enterprise Security stands out in security operations with robust features like comprehensive threat intelligence and seamless data integration. Its real-time analytics and customizable queries enable proactive threat analysis and efficient incident response. Integration with multiple third-party feeds allows detailed threat correlation and streamlined data visualization. Users find the intuitive UI and broad compatibility support efficient threat detection while reducing false positives. Despite its strengths, areas such as visualization capabilities and integration processes with cloud environments need enhancement. Users face a high learning curve, and improvements in automation, AI, documentation, and training are desired to maximize its potential.

What Are the Key Features of Splunk Enterprise Security?

Log Management: Efficiently manages and organizes a vast amount of logs for better data handling.
Rapid Data Search: Quickly retrieves relevant data for fast decision-making.
Flexible Dashboards: Customizable dashboards provide clear data visualization.
Comprehensive Threat Intelligence: Offers detailed insights to preemptively defend against threats.
Real-Time Analytics: Analyzes data in real-time to enhance response times.
Integration with Third-Party Feeds: Streamlines information flow from multiple sources.

What Benefits Should Users Investigate in Reviews?

Efficient Incident Response: Enhances the ability to respond promptly to threats.
False Positive Reduction: Minimizes incorrect threat alarms, making monitoring more efficient.
Threat Detection Speed: Accelerates the identification and evaluation of security threats.
Cost-Effectiveness: Potential savings through better licensing options and operational efficiency.
User Adaptability: Enhancements in documentation and training resources aid in overcoming the learning curve.

In specific industries like finance and healthcare, Splunk Enterprise Security is instrumental for log aggregation, SIEM functionalities, and compliance monitoring. Companies leverage its capabilities for proactive threat analysis and response, ensuring comprehensive security monitoring and integration with various tools for heightened operational intelligence.

Splunk

Sample Customers

Caduceus, SUNY

Splunk has more than 7,000 customers spread across over 90 countries. These customers include Telenor, UniCredit, ideeli, McKenney's, Tesco, and SurveyMonkey.

Seceon Open Threat Management Platform vs. Splunk Enterprise Security