Strong Analysis Engine, Easy to use web interface. Setting up rules and alerts is also quite simple. In fact, we mostly use many of the inbuilt alerts and monitors with minor modification (primarily around the trigger levels). Integrates with many available vulnerability assessment tools like Nessus, Qualys and nMap to present a single view of your infrastructure status. No requirement for a separate RDBMS saves licensing costs.
Based on my interactions with peers and vendors, for smaller organizations it is much better than other more established competitors which may offer features but are too expensive or too big for your needs. At the higher end, can easily handle workloads similar to the larger players.
