Cybereason XDR vs LogRhythm UEBA comparison

Cybereason and LogRhythm are both solutions in the Extended Detection and Response (XDR) category. Cybereason is ranked #22 with an average rating of 8.7, while LogRhythm is ranked #34 with an average rating of 6.8. Cybereason holds a 0.8% mindshare in XDR, compared to LogRhythm’s 1.0% mindshare. Additionally, 100% of Cybereason users are willing to recommend the solution, compared to 55% of LogRhythm users who would recommend it.

Cybereason XDR

Read 3 Cybereason XDR reviews

1,464 Views
205 Comparison Views

100% willing to recommend

LogRhythm UEBA

Read 11 LogRhythm UEBA reviews

902 Views
285 Comparison Views

55% willing to recommend

Cybereason XDR

LogRhythm UEBA

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

```html

Cybereason XDR and LogRhythm UEBA are key players in the cybersecurity solutions sector. LogRhythm UEBA is often regarded more highly due to its superior feature set despite Cybereason XDR being recognized for its pricing and support.

Features: Cybereason XDR is recognized for its comprehensive threat detection capabilities, intuitive solution design, and robust pricing model. LogRhythm UEBA provides advanced analytics, seamless integration capabilities, and extensive feature offerings, which result in higher user satisfaction.

Room for Improvement: Cybereason XDR users suggest improvements in scalability, detection accuracy, and expanding feature sets. LogRhythm UEBA is recommended to enhance alert management, reporting functionalities, and streamline user experience. Both products have specific areas needing attention, but Cybereason XDR users focus on core improvements, while LogRhythm UEBA users point to refining strong existing features.

Ease of Deployment and Customer Service: Cybereason XDR offers a straightforward deployment process with responsive customer service, making implementation smoother. LogRhythm UEBA, while challenging in setup, compensates with proactive and knowledgeable support, providing benefits post-deployment.

Pricing and ROI: Cybereason XDR receives favorable reviews for competitive setup costs and realized ROI. LogRhythm UEBA, despite higher upfront expenses, offers substantial ROI justification and is perceived as a worthwhile long-term investment by users.

```

To learn more, read our detailed Cybereason XDR vs. LogRhythm UEBA Report (Updated: June 2025).

Buyer's Guide

Cybereason XDR vs. LogRhythm UEBA

June 2025

Download the complete report

Helped 860,592 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cybereason XDR

Ranking in Extended Detection and Response (XDR)

22nd

Average Rating

8.6

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

LogRhythm UEBA

Ranking in Extended Detection and Response (XDR)

34th

Average Rating

7.0

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (14th)

Mindshare comparison

As of July 2025, in the Extended Detection and Response (XDR) category, the mindshare of Cybereason XDR is 0.8%, up from 0.5% compared to the previous year. The mindshare of LogRhythm UEBA is 1.0%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Extended Detection and Response (XDR)

Featured Reviews

Peter Nowak

Business Development Manager for Cybereason at Bechtle

Integration of multiple firewalls enables advanced threat detection

The integration of data from firewalls and Active Directory is most valuable. Cybereason XDR facilitates two-way communication, where the firewall sends data to the Cybereason system, and it can communicate with the firewall to stop unwanted communication. Customers can deal with multiple types of firewalls with ease. The behavioral analytics help detect advanced threats when attackers use existing software. The multilayered protection approach, including NGAV, integrates XDR detection with antivirus to assess and counter threats effectively.

Read full review

Sheikh Abu Ayub Azad

CEO at Trustaira

Great at managing cyber incidents; the technical support could be improved

The initial setup is easy, partly because LogRhythm is primarily based on the Windows platform. It's good to have two engineers for deployment but it can be done with one. It's more about the knowledge. Deployment is typically done in two or three different phases. It usually takes up to three full months to get good deployment. There's the initial onboarding of all the log sources, then collecting data in the data lake, followed a couple of weeks later with some minor tuning before the final tuneup.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cybereason XDR's most useful feature is the investigation."

"The integration of data from firewalls and Active Directory is most valuable."

"The solution has an investigation feature, which is useful for building storylines."

"The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance, it can detect unusual user logins, such as a user logging in from a new browser or location."

"The tool's most valuable feature is server threat hunting."

"It is easy to monitor users and that is how the solution is adding value to our firm."

"I typically use the product for reducing cyber risk, and I can investigate attacks more quickly using machine learning tools."

"LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs."

"I can investigate attacks more quickly using machine learning tools."

"What I like most about LogRhythm UEBA is that it allows you to identify and analyze end-user behaviors and suspicious activities within the systems."

"The most valuable features are file activity monitoring and registry activity monitoring."

More LogRhythm UEBA pros

Cons

"Customer service is rated as a five out of ten. When they work and reach the right level, they are helpful, but getting to the right person can be time-consuming."

"The one thing we sometimes have issues with is its integration with other security applications like antiviruses."

"There could be more integrations with other data sources like NDR systems."

"Cybereason's customer support could be better."

"The search feature needs to be improved."

"The product could be user-friendly for someone who doesn’t have any prior experience working with it."

"LogRhythm UEBA's data aggregation needs to be improved. Open-source users do not have much documentation available. Documentation is available only for enterprise users."

"The on-premises LogRhythm is not very scalable. When considering packets per second or the MPS needed for additional logs such as web application logs, scalability is usually found in cloud products."

"The product should improve its dashboards. Splunk has neat dashboards. Additionally, we would like to enhance the use cases provided by LogRhythm as its use case library is not as extensive as other tools. Its machine-learning capabilities need to improve when compared to other solutions. It lacks risk quantification in a single, transparent view for individuals such as CSOs."

"The cloud version is lacking and not up to par."

"The UI could be improved a little bit."

"In general, if something needs to be improved in the algorithm, it would be the dashboards."

More LogRhythm UEBA cons

Pricing and Cost Advice

"The solution is cheaper than Microsoft Defender. It has a subscription and no standard license."

"As LogRhythm UEBA is pretty expensive, I'd give its pricing a seven out of ten."

"The pricing is nice when compared to other products in the industry."

"It is quite a budget-friendly product."

"LogRhythm UEBA's pricing is affordable for small and medium businesses."

"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."

"Licensing is on a yearly basis. It's not expensive compared to its competitors."

See which vendors are best for you

Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.

See recommendations

860,592 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

21%

Manufacturing Company

15%

Financial Services Firm

Comms Service Provider

Computer Software Company

16%

Financial Services Firm

11%

Manufacturing Company

Real Estate/Law Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about Cybereason XDR?

The solution has an investigation feature, which is useful for building storylines.

See all answers

What needs improvement with Cybereason XDR?

There could be more integrations with other data sources like NDR systems. Additionally, technical support has been slow in recent times. Enabling multifactor authentication has been problematic fo...

See all answers

What is your primary use case for Cybereason XDR?

I use Cybereason XDR for customers who don't have a SOC or managed SOC yet and want to be protected on more than their desktops. It is especially used in the manufacturing industry, yet not exclusi...

See all answers

What do you like most about LogRhythm UserXDR?

The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance...

See all answers

What is your experience regarding pricing and costs for LogRhythm UserXDR?

I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive.

See all answers

What needs improvement with LogRhythm UserXDR?

In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solutions such as Splunk are very neat and clean. I would also like to improve the us...

See all answers

Comparisons

Wazuh vs Cybereason XDR

Compared 36% of the time

Microsoft Defender XDR vs Cybereason XDR

Compared 25% of the time

CrowdStrike Falcon vs Cybereason XDR

Compared 18% of the time

Cynet vs Cybereason XDR

Compared 12% of the time

Trend Vision One vs Cybereason XDR

Compared 8% of the time

More Cybereason XDR Competitors

Wazuh vs LogRhythm UEBA

Compared 42% of the time

Darktrace vs LogRhythm UEBA

Compared 21% of the time

Cortex XDR by Palo Alto Networks vs LogRhythm UEBA

Compared 11% of the time

Microsoft Purview Insider Risk Management vs LogRhythm UEBA

Compared 8% of the time

IBM Security QRadar vs LogRhythm UEBA

Compared 7% of the time

More LogRhythm UEBA Competitors

Product Reports

Buyer's Guide

Extended Detection and Response (XDR)

June 2025

Download Cybereason XDR product report

Buyer's Guide

User Entity Behavior Analytics (UEBA)

June 2025

Download LogRhythm UEBA product report

Also Known As

No data available

LogRhythm UserXDR, LogRhythm Enterprise UEBA

Overview

Cybereason is the leader in endpoint protection, offering endpoint detection and response, next-generation antivirus, and managed monitoring services. Founded by elite intelligence professionals born and bred in offense-first hunting, Cybereason gives enterprises the upper hand over cyber adversaries.

Cybereason

LogRhythm UEBA enables your security team to quickly and effectively detect, respond to, and neutralize both known and unknown threats. Providing evidence-based starting points for investigation, it employs a combination of scenario analytics techniques (e.g., statistical analysis, rate analysis, trend analysis, advanced correlation), and both supervised and unsupervised machine learning (ML).

LogRhythm

Sample Customers

MOTOROLA MOBILITY

Information Not Available

Buyer's Guide

Cybereason XDR vs. LogRhythm UEBA

June 2025

Free Report: Cybereason XDR vs. LogRhythm UEBA

Find out what your peers are saying about Cybereason XDR vs. LogRhythm UEBA and other solutions. Updated: June 2025.

DOWNLOAD NOW

860,592 professionals have used our research since 2012.

See our Cybereason XDR vs. LogRhythm UEBA report.

See our list of best Extended Detection and Response (XDR) vendors.

We monitor all Extended Detection and Response (XDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.