

Find out in this report how the two Security Information and Event Management (SIEM) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
We're taking these things that executives see on the news, cyber threats falling from the sky, and we're taking the timeline that would take weeks or sometimes even months to address, depending on what's required for the detection, and bringing that timeline down to hours and days.
We rolled out approximately 1,500 Armory alerts in three months, which would not have been possible with Splunk.
If we were not doing more and did not have Anvilogic, we would need one dedicated person to do this detection engineering.
The impact of a ransomware attack typically encrypts all critical data and stops production.
Large enterprises that can afford it often choose SentinelOne for its ease of management compared to other platforms.
If I estimate how much time it has saved me, I would say it has saved almost 30 to 40 percent of time compared to other tools.
The product management and the product engineering team are available to us if we need to review something with them.
One of the best things about Anvilogic is the partnership, their knowledge, the depth of technical understanding, and the speed at which they respond.
I would evaluate their customer service and tech support as fantastic.
A lot of people have to reach out to one sole person who has basically developed the system, creating a bottleneck for responses.
On a scale of one to ten, the technical support of SentinelOne would be rated as an 8.5.
I would evaluate their customer service and technical support as very good, five stars.
We started with about 55 detections and scaled up to about 980 odd detections so far.
Anvilogic scales effectively with the growing needs of my organization.
Anvilogic is helping us identify what the needs of the business are, where in many cases, business processes just run off on their own.
I have not run into any issues regarding how scalable Singularity Platform is, so I do not see any limitations for scalability.
Scalability is not an issue for Singularity Platform because it is delivered as a SaaS service, so scalability is taken care of by SentinelOne.
I believe that the system is scalable but it all goes back to personnel behind the scenes and the availability of those people, plus the knowledge they hold in terms of being able to bring larger clients onboard.
I have never experienced a serious outage.
I would assess the stability and reliability of Anvilogic as very good.
The biggest instability has been with the AI agent, which the team is not using fully due to inconsistent results.
If I have to rate the stability level of Singularity Platform from one to ten, I would say it would be a strong nine.
The automation helps a lot, and once implemented, we face no further issues regarding stability or scalability; everything works absolutely fine.
The product is pretty stable, and even if the agent is offline, it will handle the threats.
Flexibility is key for any enterprise platform to meet our unique business requirements.
It lacked a robust CI/CD pipeline, which is crucial for comprehensive testing before changes go into production.
It seems that it requires more growth in how you can navigate through it and see the overall maturity of it clearly for a specific actor versus the enterprise-wide visibility of the whole maturity of the program.
When I find a log suspicious, if it automatically points out that a particular point in the log at a specific timing or frame is looking malicious, it would be easier for me.
Correlation in general is done very well with the storyline because it is the platform's own field for correlating data.
If you are asking if this is fully customizable, I would say it is partially customizable, not fully customizable.
Because they do not completely replace a SIEM, their pricing is slowly edging towards being a little too much for a smaller organization like ours.
Licensing is reasonably affordable and should be evaluated over time concerning the platform's value.
They provide estimates because obviously every business is different, but they provided reasonable estimates that were fairly accurate based on other customers from a similar type of background or size.
My philosophy is you pay for what you get, so if you decide to cheapen out on the cost of your platform, you are not going to get what you want.
As a SIEM tool, if it were priced less, many more people could explore it.
While it offers very good features at the enterprise level, it comes at a premium price.
Detection insights help us easily identify the most noisy ones, the effective ones, and what needs to be fixed to move the noisy ones to effective ones.
The learning curve is not steep, allowing even those with basic knowledge in writing detection rules to adapt quickly.
Anvilogic plus Snowflake has vastly improved our total cost of ownership for the SIM platform; we went from a pretty expensive platform in Splunk that was not vertically scalable due to budget limitations to a platform now that is far more efficient per terabyte of data ingested and processed per day.
Real-time monitoring is very much available in Singularity Platform because once the agent is up to date, it protects critical assets across our network against malicious attacks.
Singularity Platform's functionality for ransomware rollback is quite useful because if you have a ransomware attack, most EDR solutions do not have the feature to do a rollback and bring the system to its earlier state, but that is one of the unique features that Singularity Platform has which can be a game changer for customers.
This allows executives to determine if they have to liquefy any of their assets at a certain point in time, providing a great view in terms of risk management and current available cash balances while also considering the strategic direction in the next year or two where they plan on going with their cash balances.
| Product | Mindshare (%) |
|---|---|
| Anvilogic | 0.4% |
| Singularity Platform | 0.4% |
| Other | 99.2% |

| Company Size | Count |
|---|---|
| Large Enterprise | 12 |
| Company Size | Count |
|---|---|
| Small Business | 8 |
| Midsize Enterprise | 2 |
| Large Enterprise | 1 |
Anvilogic breaks the SIEM lock-in that drives detection gaps and high costs for enterprise SOCs. It enables detection engineers and threat hunters to keep using their existing SIEM while seamlessly adopting a scalable and cost-effective data lake for high-volume data sources and advanced analytics use cases.
By eliminating the need for rip-and-replace, Anvilogic allows security leaders to confidently join the rest of the enterprise on the modern data stack without disrupting existing processes. Security operations teams at banks, airlines, and large tech companies use Anvilogic’s modular detection engine, thousands of curated threat scenarios, and AI security copilot to improve detection coverage and save millions of dollars.
One intelligent platform. Unprecedented speed. Infinite scale. Singularity™ enables unfettered visibility, industry-leading detection, and autonomous response. Discover the power of AI-powered, enterprise-wide cybersecurity.
The world’s leading enterprises use the Singularity platform to prevent, detect, and respond to cyber attacks at machine-speed, greater scale, and higher accuracy across endpoint, cloud, and identity.
Maximize visibility across the entire enterprise. Defend your enterprise with unrivaled speed, coverage, and efficiency. Leverage AI to respond across the entire connected security ecosystem.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.