Try our new research platform with insights from 80,000+ expert users

ThreatConnect Threat Intelligence Platform (TIP) vs USM Anywhere comparison

The compared ThreatConnect and LevelBlue solutions aren't in the same category. ThreatConnect is ranked #6 in TIPT , with an average rating of 8.3, and holds a 5.7% mindshare in the category. LevelBlue is ranked #30 in SIEM , with an average rating of 7.3, and holds a 0.9% mindshare. Additionally, 100% of ThreatConnect users are willing to recommend the solution, compared to 92% of LevelBlue users who would recommend it.
ThreatConnect Threat Intell...
Read 6 ThreatConnect Threat Intelligence Platform (TIP) reviews
  • 1,660 Views
  • 1,241 Comparison Views
100% willing to recommend
USM Anywhere
Read 115 USM Anywhere reviews
  • 1,986 Views
  • 1,353 Comparison Views
92% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive Summary
We performed a comparison between ThreatConnect Threat Intelligence Platform (TIP) and USM Anywhere based on real PeerSpot user reviews.

Find out what your peers are saying about CrowdStrike, Recorded Future, VirusTotal and others in Threat Intelligence Platforms.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Threat Intelligence Platforms Report (Updated: April 2025).
Buyer's Guide
Threat Intelligence Platforms
April 2025
Download the complete report
Helped 850,760 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ThreatConnect Threat Intell...
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
6
Ranking in other categories
Threat Intelligence Platforms (6th), Security Orchestration Automation and Response (SOAR) (18th)
USM Anywhere
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
115
Ranking in other categories
Log Management (44th), Security Information and Event Management (SIEM) (30th), Endpoint Detection and Response (EDR) (51st), Compliance Management (12th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. ThreatConnect Threat Intelligence Platform (TIP) is designed for Threat Intelligence Platforms and holds a mindshare of 5.7%, down 7.5% compared to last year.
USM Anywhere, on the other hand, focuses on Security Information and Event Management (SIEM), holds 0.9% mindshare, down 1.9% since last year.
Threat Intelligence Platforms
Security Information and Event Management (SIEM)
 

Featured Reviews

Aadarsh Dawn - PeerSpot reviewer
Offers features like response capabilities and automation response and automation orchestration
ThreatConnect aggregates and operationalizes Threat intelligence data and sources across internal client environments. It leverages Automation and built in Case Management to streamline and automate threat intelligence-driven processes and investigations within client environments ThreatConnect…
Read full review
Kris Nawani - PeerSpot reviewer
Offers complete coverage without the need to install additional software
USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools The solution offers complete coverage without the need to install additional software, as it is maintained by the vendor. It helps in saving…
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I like their customer support."
"The tool's installation, integration, and playbooks are very straightforward."
"It's a solid platform and is stable enough. It is not complicated and is easy to use."
"ThreatConnect has a highly user-friendly interface."
"We have been able to see a return on investment as our clients believe in us more."
"The most valuable features are ease of use and the ability to customize it."
"The product automatically generated a threat score based on the maliciousness of an IP."
"The asset management of nodes has been a large help in terms of being able to track applications with more detail and have changes made being monitored into one source."
"It has streamlined log aggregation and analysis to meet organizational and regulatory needs."
"Using the communication within the security device, it is easier to create plugins."
"It brought our logs into one place for review and set up alarms based on changes we were missing due to lack of having one place for everything to go."
"Its powerful correlation engine helps reduce time in manually correlating events."
"There are multiple tools for information security. The solution includes all the latest advances on the network and host intrusion detection systems."
"AlientVault has helped us in improving our visualization and incident response during cybersecurity situations."
"We're using it more for reporting, that's all. We're using it to help our customers to pass any kind of audits that they receive."
More USM Anywhere pros
 

Cons

"Support is an area with which nobody is ever fully satisfied, so it can be improved."
"Integration is an area that could use some improvement."
"They should make it a little bit easier to generate events and share them with the community"
"It would be good to have more feeds and more integrated sources for enrichment."
"I couldn’t get any training videos online when I was working with the tool."
"I would like to see improvements in the time zone support of their customer service, considering users are from different time zones."
"Sometimes, when using the solution, it slows down, affecting our ability to mitigate threats."
"Sometimes the log is unclear, and the report is a bit ambiguous."
"The one thing I continue to dislike about the USM is the limitation on reports."
"they seem to have bugs from time to time that go unfixed for a while and that is frustrating. I'm not saying the product needs to be bug-free, but they need to be responsive to bugs."
"The reporting tools are a bit lacking for building reports to give directly to customers, but support has been helpful in giving our requests for new features to the development team and following up with us."
"Support can be slow at times, but the quality is high. Posted knowledge base articles could use improvement."
"AlienVault needs to continue to integrate with other third-party technologies that clients want to have monitored."
"The UI and overall processes need a little bit more love. This shows in the error banners that come up when you select certain things. There isn't a day that goes by that the UI doesn't error out and I can't view events for an alarm."
"The other thing is the agent is OSSEC. They needed to create its own agent to help to find threats on the devices that it happens to be installed."
More USM Anywhere cons
 

Pricing and Cost Advice

"The price could be better."
"The price of this product is in the mid-range, not too expensive, nor inexpensive."
"The tool is expensive."
"I rate the product price as six on a scale of one to ten, where one is extremely expensive, and ten means it is cheap."
"We ran a few PoCs. The price and feature set were the best with AlienVault."
"They are a little more expensive than Microsoft."
"So far, I feel the product's pricing is a good value. The technology is decent. You get what you pay for. I think it's fair."
"It allows you to do a lot with a small price tag... The pricing is the best on the market."
"I don't think the product's pricing is a good value because they try to raise the price 50 percent every year... AlienVault needs to understand that not all customers are huge enterprises... Their sales team is way too aggressive. The price they advertise is not always the price you get."
"​The price point is good.​"
"It's affordable for most customers."
"AT&T AlienVault USM is an expensive solution and we pay for the license and the support separately. We paid for the license and support for three years."
More USM Anywhere pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Threat Intelligence Platforms solutions are best for your needs.
See recommendations
850,760 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
12%
Manufacturing Company
10%
Government
9%
Computer Software Company
20%
Financial Services Firm
9%
Comms Service Provider
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about ThreatConnect Threat Intelligence Platform (TIP)?
The product automatically generated a threat score based on the maliciousness of an IP.
See all answers
What is your experience regarding pricing and costs for ThreatConnect Threat Intelligence Platform (TIP)?
The pricing seems a bit high for smaller companies. It would be beneficial if they had pricing tailored to different client sizes.
See all answers
What needs improvement with ThreatConnect Threat Intelligence Platform (TIP)?
I would like to see improvements in the time zone support of their customer service, considering users are from different time zones. Additionally, the pricing is high for smaller organizations, so...
See all answers
What do you like most about AT&T AlienVault USM?
The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful.
See all answers
What is your experience regarding pricing and costs for AT&T AlienVault USM?
The pricing is amazing and really cheap.
See all answers
What needs improvement with AT&T AlienVault USM?
There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks. It is also limited when used with bigger products and has complex password requirements.
See all answers
 

Comparisons

Recorded Future vs ThreatConnect Threat Intelligence Platform (TIP) Logo
Recorded Future vs ThreatConnect Threat Intelligence Platform (TIP)
Compared 25% of the time
Anomali vs ThreatConnect Threat Intelligence Platform (TIP) Logo
Anomali vs ThreatConnect Threat Intelligence Platform (TIP)
Compared 23% of the time
ThreatQ vs ThreatConnect Threat Intelligence Platform (TIP) Logo
ThreatQ vs ThreatConnect Threat Intelligence Platform (TIP)
Compared 15% of the time
Palo Alto Networks Cortex XSOAR vs ThreatConnect Threat Intelligence Platform (TIP) Logo
Palo Alto Networks Cortex XSOAR vs ThreatConnect Threat Intelligence Platform (TIP)
Compared 10% of the time
Cyware Cyber Fusion vs ThreatConnect Threat Intelligence Platform (TIP) Logo
Cyware Cyber Fusion vs ThreatConnect Threat Intelligence Platform (TIP)
Compared 7% of the time
More ThreatConnect Threat Intelligence Platform (TIP) Competitors
AlienVault OSSIM vs USM Anywhere Logo
AlienVault OSSIM vs USM Anywhere
Compared 26% of the time
Splunk Enterprise Security vs USM Anywhere Logo
Splunk Enterprise Security vs USM Anywhere
Compared 13% of the time
Wazuh vs USM Anywhere Logo
Wazuh vs USM Anywhere
Compared 11% of the time
Rapid7 InsightIDR vs USM Anywhere Logo
Rapid7 InsightIDR vs USM Anywhere
Compared 10% of the time
IBM Security QRadar vs USM Anywhere Logo
IBM Security QRadar vs USM Anywhere
Compared 9% of the time
More USM Anywhere Competitors
 

Product Reports

Buyer's Guide
Threat Intelligence Platforms
April 2025
ThreatConnect Threat Intelligence Platform (TIP) reportDownload ThreatConnect Threat Intelligence Platform (TIP) product report
Buyer's Guide
USM Anywhere
April 2025
USM Anywhere reportDownload USM Anywhere product report
 

Also Known As

No data available
AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity
 

Interactive Demo

ThreatConnect
Demo not available
LevelBlue
 

Overview

The ThreatConnect Threat Intelligence Operations (TIOps) Platform lets organizations operationalize and evolve their cyber threat intel program, enabling cybersecurity operations teams to measurably improve their organization’s resilience to attacks. The TIOps Platform enhances collaboration across teams to drive proactive threat defense, and improve threat detection and response. The AI- and automation-powered TI Ops Platform enables analysts to perform all their work effectively and efficiently in a single, unified platform, allowing threat intel to be aggregated, analyzed, prioritized, and actioned against the most relevant threats. 

ThreatConnect

USM Anywhere centralizes security monitoring of networks and devices in the cloud, on premises, and in remote locations, helping you to detect threats virtually anywhere.

Discover

  • Network asset discovery
  • Software & services discovery
  • AWS asset discovery
  • Azure asset discovery
  • Google Cloud Platform asset discovery

Analyze

  • SIEM event correlation, auto-prioritized alarms
  • User activity monitoring
  • Up to 90-days of online, searchable events

Detect

  • Cloud intrusion detection (AWS, Azure, GCP)
  • Network intrusion detection (NIDS)
  • Host intrusion detection (HIDS)
  • Endpoint Detection and Response (EDR)

Respond

  • Forensics querying
  • Automate & orchestrate response
  • Notifications and ticketing

Assess

  • Vulnerability scanning
  • Cloud infrastructure assessment
  • User & asset configuration
  • Dark web monitoring

Report

  • Pre-built compliance reporting templates
  • Pre-built event reporting templates
  • Customizable views and dashboards
  • Log storage
LevelBlue
 

Sample Customers

Oracle, IBM, General Dynamics, Scotiabank, Sony, Athena Health, Berkshire Hathaway Energy, Workday, TikTok
Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom
Buyer's Guide
Threat Intelligence Platforms
April 2025
Download Free Report
Find out what your peers are saying about CrowdStrike, Recorded Future, VirusTotal and others in Threat Intelligence Platforms. Updated: April 2025.
DOWNLOAD NOW
850,760 professionals have used our research since 2012.

We monitor all Threat Intelligence Platforms reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.