Try our new research platform with insights from 80,000+ expert users

Group-IB Threat Intelligence vs USM Anywhere comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Group-IB Threat Intelligence
Average Rating
8.8
Reviews Sentiment
6.8
Number of Reviews
5
Ranking in other categories
Threat Intelligence Platforms (10th)
USM Anywhere
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
115
Ranking in other categories
Log Management (44th), Security Information and Event Management (SIEM) (30th), Endpoint Detection and Response (EDR) (51st), Compliance Management (12th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Group-IB Threat Intelligence is designed for Threat Intelligence Platforms and holds a mindshare of 3.1%, up 2.8% compared to last year.
USM Anywhere, on the other hand, focuses on Security Information and Event Management (SIEM), holds 0.9% mindshare, down 1.9% since last year.
Threat Intelligence Platforms
Security Information and Event Management (SIEM)
 

Featured Reviews

ALEX LOGINOV - PeerSpot reviewer
Completely satisfied with the way the report is prepared and easy to setup
We did use it for threat detection, but not directly. I analyze multiple reports, including this one, and assess my client's infrastructure. I identify threats outlined in the reports that may be relevant to the client's infrastructure, and then I help them build detection use cases. There's no automation. We don't do anything automatically at this point. It's all manual and based on analysis. I can't integrate it into automatic feeds because the report outlines threats that may not be relevant to the client's infrastructure. So, I do the analysis and integrate it manually. I'm completely satisfied with the way the report is prepared. It's a good report.
Kris Nawani - PeerSpot reviewer
Offers complete coverage without the need to install additional software
USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools The solution offers complete coverage without the need to install additional software, as it is maintained by the vendor. It helps in saving…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Threat Intelligence's best feature is threat activation."
"The totality of the recordings is quite important. The networks, the new threat actors, the new methods, tactics, techniques, and procedures."
"The tool's most valuable feature is the sandbox."
"The most valuable Group-IB Threat Intelligence features are their detections, especially in terms of account and card information leakage. This data sets Group-IB apart from some of the competition."
"We have found the site intelligence features to be the most valuable."
"Reports are customized, so you can present them to executives or engineers.​"
"The solution is stable."
"The Event Correlation and vulnerability scans have been the most useful. As a 24/7 SOC, we use the incoming alarms to give an overview of suspicious traffic going through the network. It's easy to look at the correlated events and see the broad picture of traffic for that customer. Vulnerability scans are good for providing patch and remediation guidelines to keep customer systems secure."
"It has streamlined log aggregation and analysis to meet organizational and regulatory needs."
"Asset discovery and vulnerability scanner are good features. The integration between this solution and OTX, which is an AlienVault platform for Open Threat Exchange, is also a valuable feature. It is also quick and easy to deploy, so you can quickly engage with a customer's environment."
"The ease of implementation is the most valuable feature."
"It has allowed us to see what is happening on our servers."
"It is my "security person" looking at irregularities and letting me know when something has occurred."
 

Cons

"The web intelligence could be improved. It is not as good as the intelligence from other solutions."
"The lack of appliance-based or on-premise options for this solution is its biggest downfall. Clients request them often."
"Group-IB Threat Intelligence should improve integration for SIEM and SOAR solutions."
"Threat Intelligence's OT security could be improved."
"As the landscape evolves, they could provide a little more detail or specificity to map it to the MITRE ATT&CK framework."
"they seem to have bugs from time to time that go unfixed for a while and that is frustrating. I'm not saying the product needs to be bug-free, but they need to be responsive to bugs."
"There are many reports included but would be nice to have better access to the data."
"We've had some stability problems, not a lot, but a few. Updates seem to be the worst. That seems to be when the stability problems come up."
"The only complex area of the setup was writing the custom scripts."
"As this software is in the cloud, you do not have control on updates and general changes which are happening."
"It would be nice to see some machine learning and monitoring of the configuration in network devices."
"Maybe logs are the problem, as the database query is too slow. If you want to search something, you need time to find it."
"It would be hard for any legitimate MSSP to use it."
 

Pricing and Cost Advice

"The pricing is alright. It's right on the mark."
"Threat Intelligence is costly, but it gives value for money."
"Group-IB Threat Intelligence's pricing is reasonable."
"AlienVault is flexible on their pricing for unlimited licenses."
"So far, it has been a good solution for a tight budget."
"Pricing is very competitive with other products and you get much more functionality from AlienVault."
"The ROI is quite good."
"The licensing fees are dependent on usage."
"I don't know exactly, but I know it is based on the number of logs and the retention duration, such as 30 days or something like that. So, the smallest package is about 500 a month for 30 days of logs. There is a virtual machine. You need resources for it. It is a log collecting VM. They provide the software, and you just have to load a virtual machine. So, you're going to incur some CPU RAM and storage for wherever this log collecting appliance is running, which typically is in our cloud and on our platform for the customer."
"I don't think the product's pricing is a good value because they try to raise the price 50 percent every year... AlienVault needs to understand that not all customers are huge enterprises... Their sales team is way too aggressive. The price they advertise is not always the price you get."
"It's very reasonably priced. It was one of the lowest among the ones I looked at. Licensing is pretty flexible. They can do a two-year or a three-year, even a one-year, perhaps."
report
Use our free recommendation engine to learn which Threat Intelligence Platforms solutions are best for your needs.
850,760 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
21%
Computer Software Company
18%
Energy/Utilities Company
6%
Manufacturing Company
6%
Computer Software Company
20%
Financial Services Firm
9%
Comms Service Provider
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Group-IB Threat Intelligence?
We have found the site intelligence features to be the most valuable.
What is your experience regarding pricing and costs for Group-IB Threat Intelligence?
The pricing is alright. It's right on the mark. It costs money, but it's not too high. It's reasonable. For me, it's a reasonable price for the quality of the product.
What needs improvement with Group-IB Threat Intelligence?
As the landscape evolves, they could provide a little more detail or specificity to map it to the MITRE ATT&CK framework. Even though it is done in the report, it could be done better.
What do you like most about AT&T AlienVault USM?
The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful.
What needs improvement with AT&T AlienVault USM?
There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks. It is also limited when used with bigger products and has complex password requirements.
 

Also Known As

No data available
AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity
 

Overview

 

Sample Customers

Information Not Available
Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom
Find out what your peers are saying about CrowdStrike, Recorded Future, VirusTotal and others in Threat Intelligence Platforms. Updated: April 2025.
850,760 professionals have used our research since 2012.