Try our new research platform with insights from 80,000+ expert users

Elastic Security vs Exabeam comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Torq
Sponsored
Ranking in Security Orchestration Automation and Response (SOAR)
8th
Average Rating
8.6
Reviews Sentiment
4.9
Number of Reviews
2
Ranking in other categories
AI-SOC (13th), AI-Powered Security Automation (2nd)
Elastic Security
Ranking in Security Orchestration Automation and Response (SOAR)
5th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
66
Ranking in other categories
Log Management (8th), Security Information and Event Management (SIEM) (5th), Endpoint Detection and Response (EDR) (14th), Extended Detection and Response (XDR) (8th)
Exabeam
Ranking in Security Orchestration Automation and Response (SOAR)
12th
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
19
Ranking in other categories
Security Information and Event Management (SIEM) (20th), User Entity Behavior Analytics (UEBA) (2nd), Security Incident Response (5th), Threat Intelligence Platforms (TIP) (12th), AI-Powered Cybersecurity Platforms (10th)
 

Featured Reviews

Trevor R. - PeerSpot reviewer
Cybersecurity Engineer at a real estate/law firm with 10,001+ employees
Automation has transformed phishing triage and case management for our security team
In terms of increasing alert handling capability for our SecOps staff, Torq's Identic AI is really strong in analysis, and recently, we started using what's called the AI Step, having really great success. Using that one piece of AI, we auto-closed 511 cases in quarter four alone. Torq has changed the day-to-day experience for my security analysts by enhancing their workload management and how they feel about their job, as they can now operate cases more quickly and have a nicer centralized location for information that previously required manual work. Torq's unified platform approach to AI SOC automation and case management has significantly benefited us by integrating the case management platform with the automation, which saves time compared to managing multiple point solutions across our security stack.
Laurentiu Popescu - PeerSpot reviewer
Chief Product Officer at ClusterPower
Has improved threat detection with deep log analysis and streamlined investigation workflows
The most useful features I find in Elastic Security are the forensic ones that allow us to carry deeper analysis into the logs for in-depth investigations, and the dashboards, with the reporting dashboard being quite user-friendly. Elastic Security is quite good at identifying threats, as it is part of the deep investigation tool that I mentioned before. Unless we need to look further into a certain log, we can carry out a deeper analysis and forensics on those particular logs. I can assess the impact of Elastic Security's real-time data analysis on our threat response efficiency as working pretty good. We are looking for real-time analysis because we have a continuous inflow of logs from different sources: from our cloud, from Active Directory, from our network. So it works pretty well.
reviewer2650449 - PeerSpot reviewer
Analyst at a government with 1,001-5,000 employees
Machine learning features improve security insight but on-prem limitations prompt consideration of migration
We only use Exabeam for Advanced Analytics. We don't do all those other aspects like ticketing plugins. We just use it for the integration purposes, which are kind of basic. We send alerts via the dashboard for our SOC to identify risky users Exabeam includes machine learning features and…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Using that one piece of AI, we auto-closed 511 cases in quarter four alone."
"As an analyst, it has demonstrated potential to reduce workforce requirements and time needed for related activities."
"The indexes allow you to get your results quickly. The filtering and log passing is the advantage of Logstash."
"I like that it's a SIEM platform. I like that I can sell Elastic Security quickly. Elastic Security has a large community that can support users."
"I like the indexing of the logs."
"The solution is quite stable. The performance has been good."
"Its flexibility is most valuable. We can have a number of scenarios, and we can get logs from anything. If we know how to use Logstash, we can tweak it in many ways. This makes the logging search on Elastic very easy."
"We chose the product based on the ability to scan for malware using a malware behavioral model as opposed to just a traditional hash-based antivirus. Therefore, it's not as intensive."
"The performance is good and it is faster than IBM QRadar."
"It is an extremely stable solution. Stability-wise, I rate the solution a ten out of ten."
"The setup is not difficult. It was easy."
"I have customers that like the EUBA functionality of it. The solution has the ability to build a session, basically. It pulls a lot of information together, for example, everything a user does in a specific timeframe. It's quite helpful."
"The way it can connect with AWS is very useful, and the integrations are pretty good."
"The UI was very clean."
"The most valuable feature of Exabeam is the timeline creation based on log sources, which helps in security investigations."
"The solution's initial setup process is easy."
"Exabeam includes machine learning features and out-of-the-box rules that we rely on."
"The user interface and the timelines they use are the most valuable features. The price model is very simple so that one can understand it easily and there are no surprises within it."
 

Cons

"Regarding stability, I have noticed some lagging, crashing, and downtime, which is one of my largest gripes."
"It was able to capture data but was unable to differentiate between the agent hostname we are using and the hostname that resides on the back end of the Internet."
"Improvements in Elastic Security could include refining and normalizing queries to make them more user-friendly, enhancing the user experience with better documentation, and addressing any latency issues."
"The interface could be more user friendly because it is sometimes hard to deal with."
"If you compare this with CrowdStrike or Carbon Black, they can improve."
"They don't provide user authentication and authorisation features (Shield) as a part of their open-source version."
"Continuous upgrades can be quite inconvenient. My security testing team continuously reports vulnerabilities, and we have to fix and update the versions frequently."
"The solution should generate an automatic product that integrates with ELK Stack to use artificial intelligence."
"Elastic sometimes does not correctly identify threats or anomalies. It might not classify an issue as malicious or critical accurately."
"There are connectors to gather logs for Windows PCs and Linux PCs, but if we have to get the logs from Syslog then we have to do it manually, and this should be automated."
"Updating the new release of Exabeam Fusion SIEM takes time and slows our performance."
"The initial setup of Exabeam Fusion SIEM is complex because it needs to integrate with the SIEM solution, but after this is complete it is straightforward."
"Exabeam's reporting dashboard could have included a filtering option to filter by the most recent detection."
"Exabeam should be a bit faster, especially in loading and vulnerability scanning."
"The only problem is that the UI is not very impressive."
"Exabeam needs to improve its documentation and provide more customization for dashboards and case management."
"We use the on-prem Exabeam product and face limitations using the web UI and administration of custom models and rules."
"We had a large volume right from the beginning and they weren't quite prepared for that. That's something that they should think about when it comes to customers that have a large volume to start off with."
 

Pricing and Cost Advice

Information not available
"Compared to other tools, Elastic Security is a cheaper solution."
"I can say that the product is cheaply priced."
"The pricing is in the middle. I think it is not an expensive experience if we compare it with big names, for example, QRadar, and also Oxide. I think Elastic Security is quite cheap. I would rate the pricing of this solution a five out of ten."
"It's a monthly cost with Elastic SIEM, but I am not sure of the exact cost."
"There is no charge for using the open-source version."
"This is an open-source product, so there are no costs."
"The solution is not expensive and costs around ten dollars a month."
"When compared to other products, the price is average or on the low side."
"Exabeam Fusion SIEM's pricing is reasonable."
"Exabeam is not a cheap solution."
"They have a great model for pricing that can be based either on user count or gigabits per day."
"The platform is not extremely expensive compared to its direct competitors; I would rate its pricing around six out of ten."
"The solution is expensive."
"There is an annual license required to use Exabeam Fusion SIEM. The price of the solution should be reduced."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
880,435 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
9%
Manufacturing Company
7%
Healthcare Company
7%
Computer Software Company
12%
Government
10%
Comms Service Provider
8%
Manufacturing Company
7%
Financial Services Firm
12%
Computer Software Company
10%
Manufacturing Company
9%
Healthcare Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business40
Midsize Enterprise11
Large Enterprise15
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise3
Large Enterprise7
 

Questions from the Community

What needs improvement with Torq?
From our research and testing with the tool, we determined there need to be modifications and changes to train the LL...
What is your primary use case for Torq?
I used Torq for conducting one of the proof of evaluations for a vendor we are connected with. I am currently working...
What advice do you have for others considering Torq?
One of our members uses AWS, and we receive their feed. This involves triaging AWS-related logs. While I do not have ...
Datadog vs ELK: which one is good in terms of performance, cost and efficiency?
With Datadog, we have near-live visibility across our entire platform. We have seen APM metrics impacted several time...
What do you like most about Elastic Security?
Elastic provides the capability to index quickly due to the reverse indexes it offers. This data is crucial as it con...
What is your experience regarding pricing and costs for Elastic Security?
I am satisfied with the pricing, setup cost, and licensing cost. It is a pure 10.
What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendli...
What is your experience regarding pricing and costs for Exabeam Fusion SIEM?
I do not have much information about the pricing. However, I am aware that Exabeam is cheaper than Palo Alto based on...
What needs improvement with Exabeam Fusion SIEM?
We use the on-prem Exabeam product and face limitations using the web UI and administration of custom models and rule...
 

Also Known As

No data available
Elastic SIEM, ELK Logstash
No data available
 

Overview

 

Sample Customers

Information Not Available
Texas A&M, U.S. Air Force, NuScale Power, Martin's Point Health Care
Hulu, ADP, Safeway, BBCN Bank
Find out what your peers are saying about Elastic Security vs. Exabeam and other solutions. Updated: December 2025.
880,435 professionals have used our research since 2012.