No more typing reviews! Try our Samantha, our new voice AI agent.

Alert Logic MDR vs LogRhythm UEBA [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
41
Ranking in other categories
Vulnerability Management (10th), Container Security (11th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (7th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (6th)
Alert Logic MDR
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
15
Ranking in other categories
Vulnerability Management (34th), SOC as a Service (3rd), Managed Detection and Response (MDR) (10th)
LogRhythm UEBA [EOL]
Average Rating
7.0
Reviews Sentiment
6.5
Number of Reviews
11
Ranking in other categories
No ranking in other categories
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
Alice Walter - PeerSpot reviewer
Team Lead at Target
Cloud monitoring has reduced threats and has improved response times and team productivity
Alert Logic MDR's best features are the cloud-managed service, the cost benefit, and 24/7 monitoring. The alert system improved from potentially 24 hours to one hour response time. The benefit of not having to write custom queries has been significant.The features are very lightweight, with small installations that leave almost no footprint on systems. System resource utilization is minimal. Alert Logic MDR has positively impacted my organization through its decentralized pricing approach, which has protected against several viruses. Any virus stopped represents money saved. There is low impact on users, so they do not experience slowness on their computers when scanning. Alert Logic MDR has improved security in my organization from 50 to 65%.
Venda E - PeerSpot reviewer
Cloud Option Engineer at a tech vendor with 10,001+ employees
Behavior analytics has improved insider threat detection and reduces false positives for our team
The best features LogRhythm UEBA [EOL] offers are its behavioral balancing, baselining, risk scoring, and correlation with SIEM events, and what stands out most is risk scoring, which gives clear visibility into which user behaviors are genuinely risky and helps our team to focus on the highest priority threats without drowning in noise. Risk scoring helps us to quickly identify which users' activity needs immediate attention by clearly ranking threats based on impact and likelihood; it changes our day-to-day operations by reducing time spent on low-risk alerts and allowing the team to prioritize investigations and response actions more effectively and consistently. LogRhythm UEBA [EOL] has positively impacted our organization by improving our ability to detect insider threats and compromised accounts earlier, resulting in better security visibility, reduced false positives, and faster investigations and response times, which helped the team operate more effectively with greater confidence. I observed a noticeable reduction in false positive alert volume, which shortened the investigation time per incident, improving the mean time to detect and respond, and helping identify high-risk user activities earlier, which prevented potential security incidents from escalating.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"TotalCloud's best feature is the integration of cloud accounts. It helps with the risk and security posture management of our cloud infrastructure."
"I would definitely recommend Qualys TotalCloud to other customers."
"TruRisk Insights is the most important innovation they've released this year."
"The most valuable feature of Qualys TotalCloud is the visibility it provides."
"CSPM is currently the most used feature, and we are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs."
"Qualys TotalCloud's most valuable feature is its agent versatility."
"Qualys TotalCloud's most valuable feature is its ability to link clusters of assets, providing a clear model of deployments, vulnerabilities, and statuses."
"In my opinion, this is the best tool."
"The quicker implementation of changes to our infrastructure from Alert Logic tell us if there are any problems."
"The solution was consistently available, and I cannot recall any instances where it was down."
"Alert Logic MDR's best features are the cloud-managed service, the cost benefit, and 24/7 monitoring."
"While I still have on-premises appliances, I can remotely monitor everything from the cloud, and Alert Logic's ease-of-access features have helped me streamline my workflow and reduce implementation time."
"The value of Alert Logic is that everything is in one dashboard; I'm notified when there's an incident, kept up to date and advised on what steps to take."
"The installation and configuration were slick."
"The most valuable aspect of Alert Logic is its technology platform. They have SOCs in the US and Europe, giving them global visibility of the threat landscape. They detect and respond to threats in minutes. Their biggest value is human expertise. You're being attacked by a human, and you cannot respond to it unless you have a human on the other side. They have the human and technological resources to respond."
"It improves our security. Before, we didn't have anything scanning our containers. We had software scanning all the physical servers, but we had nothing to scan our containers. With Alert Logic, we can do that."
"It is easy to monitor users and that is how the solution is adding value to our firm."
"What I like most about LogRhythm UEBA is that it allows you to identify and analyze end-user behaviors and suspicious activities within the systems."
"I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools."
"LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs."
"The most valuable features are file activity monitoring and registry activity monitoring."
"Licensing is on a yearly basis, and it's not expensive compared to its competitors."
"I definitely think that it's good at finding things automatically, versus trying to define it."
"The solution's most valuable features are the graphical user interface and the reporting."
 

Cons

"In my opinion, what can be improved in Qualys TotalCloud includes pricing and container scanning."
"The downside is only in container security, but it has not been a long time since they introduced these models."
"Although TotalCloud is a helpful tool, some of its advanced features are still under development."
"Their support could be improved."
"Some major banks and insurance companies require an on-premises solution for comprehensive vulnerability management, which TotalCloud does not offer."
"To be honest, I would move out from this tool because it does not give a full view of vulnerability."
"From a downside perspective, the UI is not user-friendly and feels dated compared to other tools like Prisma Cloud."
"To improve the user experience, reporting could be simplified for better comprehension by end users and project managers, facilitating issue resolution."
"It would be great to see more of an endpoint protector."
"This product needs to mature more. While it is a good product, there are some areas where it needs work."
"Alert Logic MDR stops programs from making changes to user systems, though this can be hit or miss."
"The documentation, especially with the initial setup, needs improvement."
"I would like more data on the alert payload. It would be good to have the ability to customize the alert payload to add whatever data that we want on there. Right now, it is a bit limited."
"I would like to see it do initial scans and start capturing data, which it will truly analyze, not just be a reporting system saying, "Here is an email. Here is an email. Here is an email.""
"I think Alert Logic MDR could be improved."
"We cannot say we have seen a return on investment ROI-wise, but our first priority is to secure the endpoint."
"The product should improve its dashboards. Splunk has neat dashboards. Additionally, we would like to enhance the use cases provided by LogRhythm as its use case library is not as extensive as other tools. Its machine-learning capabilities need to improve when compared to other solutions. It lacks risk quantification in a single, transparent view for individuals such as CSOs."
"The on-premises LogRhythm is not very scalable. When considering packets per second or the MPS needed for additional logs such as web application logs, scalability is usually found in cloud products."
"The cloud version is lacking and not up to par."
"What needs improvement in LogRhythm UEBA is the pricing. Here in Asia, for example, in Sri Lanka, pricing is the primary concern, and this is the only area for improvement I see in the product."
"The product could be user-friendly for someone who doesn’t have any prior experience working with it."
"The only problem is that the agents consume too much memory and system resources; the memory and resource consumption is high."
"The UI could be improved a little bit."
"In general, if something needs to be improved in the algorithm, it would be the dashboards."
 

Pricing and Cost Advice

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."
"The cost is high, but it meets our organizational needs."
"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."
"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."
"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."
"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."
"Alert Logic has better competitive pricing than some of its competitors."
"Price of the solution was very reasonable considering the size of our organization at the time, and so it worked out perfectly."
"Its pricing is very reasonable considering what you get for what you pay. There is quite a good value there. Its licensing is also very logical. They've got the licensing price points at a reasonable level. It is on a monthly license but a yearly contract. There are no additional costs to the standard licensing fees."
"Almost any product that is on the AWS Marketplace is super easy to subscribe to."
"Our ROI would probably be zero. We don't even use it. It sits in there. We get emails and just delete them. Around the world, we don't even use it."
"It is quite a budget-friendly product."
"The pricing is nice when compared to other products in the industry."
"As LogRhythm UEBA is pretty expensive, I'd give its pricing a seven out of ten."
"Licensing is on a yearly basis. It's not expensive compared to its competitors."
"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
13%
Outsourcing Company
12%
Comms Service Provider
10%
Financial Services Firm
10%
Construction Company
11%
Computer Software Company
11%
Financial Services Firm
10%
Manufacturing Company
9%
Retailer
10%
Comms Service Provider
10%
Construction Company
9%
Financial Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise5
Large Enterprise30
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise3
Large Enterprise15
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise4
Large Enterprise4
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
To be totally honest, I do not have any best features because I have had a bad experience using this tool, especially...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is vulnerability management and exposure management. I use this tool to evalua...
What is your experience regarding pricing and costs for Alert Logic?
Regarding my experience with pricing, setup cost, and licensing, the sales and management teams discuss the price, wh...
What needs improvement with Alert Logic?
I think Alert Logic MDR could be improved. If Alert Logic MDR not only detected incidents but also allowed us to bloc...
What is your primary use case for Alert Logic?
My main use case for Alert Logic MDR was investigating all cloud assets and generating alerts when issues or attacks ...
What needs improvement with LogRhythm UserXDR?
In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solut...
What is your primary use case for LogRhythm UserXDR?
I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learnin...
What advice do you have for others considering LogRhythm UserXDR?
I would not necessarily recommend LogRhythm due to its complexity and lack of modularity. I would always recommend Sp...
 

Also Known As

Qualys TotalCloud with FlexScan
Alert Logic Managed Detection and Response, Alert Logic Threat Manager, Alert Logic Cloud Defender, Critical Watch FusionVM
LogRhythm UserXDR, LogRhythm Enterprise UEBA
 

Overview

Find out what your peers are saying about Wiz, Tenable, Qualys and others in Vulnerability Management. Updated: July 2026.
908,834 professionals have used our research since 2012.