No more typing reviews! Try our Samantha, our new voice AI agent.

LevelBlue USM Anywhere vs Mezmo comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 24, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

LevelBlue USM Anywhere
Ranking in Log Management
29th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
115
Ranking in other categories
Security Information and Event Management (SIEM) (27th), Endpoint Detection and Response (EDR) (37th), Compliance Management (12th)
Mezmo
Ranking in Log Management
55th
Average Rating
9.0
Number of Reviews
2
Ranking in other categories
Application Performance Monitoring (APM) and Observability (77th), Observability Pipeline Software (8th)
 

Mindshare comparison

As of October 2026, in the Log Management category, the mindshare of LevelBlue USM Anywhere is 1.5%, up from 0.5% compared to the previous year. The mindshare of Mezmo is 0.9%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
LevelBlue USM Anywhere1.5%
Mezmo0.9%
Other97.6%
Log Management
 

Featured Reviews

Kris Nawani - PeerSpot reviewer
Co-Founder/Director at Bangkok MSP Company Limited
Offers complete coverage without the need to install additional software
USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools The solution offers complete coverage without the need to install additional software, as it is maintained by the vendor. It helps in saving…
TO
President and Founder at STILLWATER SUPERCOMPUTING INC
It consolidates all logs into one place and provides required features and functionalities
Every once in a while, our IBM cloud operational implementation gets behind. Sometimes, when we have a customer event, we do not get access to the latest logs for about 30 minutes, particularly for the sites that are heavily utilized. This is clearly not good. It is impossible to do RCA when you can't look at the logs that pertain to the time period in which the event occurred. It could be more of an operational problem than a feature problem. I don't have visibility about whether it is a LogDNA issue or just an operational issue.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Its powerful correlation engine helps reduce time in manually correlating events."
"The most valuable feature is vulnerability management because it gives you insight into your environment to know what systems need to be updated or patched."
"The best thing about AlienVault USM is it being a Jack-of-All Trades solution, providing SIEM, HIDS/NIDS, FIM, NetFlow, Asset Management, Vulnerability Management, and more under one USM platform, which none of the commercial SIEM vendors like ArcSight or McAfee can boast of with such a diverse feature set."
"From my perspective, it saves me about two to seven hours weekly, as now I can easily check in one place all the logs and data in relation to attacks, and it also gives me an overview if a server is not configured properly."
"We're using it more for reporting, that's all. We're using it to help our customers to pass any kind of audits that they receive."
"AlienVault gave our organization a centralized tool to manage our security with its intrusion detection, asset management, vulnerability assessments, along with all of its other features, it has become an invaluable asset for our small organization."
"Ease of deployment across various environments."
"AlienVault support is what really makes this product a great investment."
"We haven't had anything yet that we couldn't do through LogDNA."
"LogDNA consolidates all logs into one place, which is super valuable."
"The solution aggregates all event streams, so that if there are any issues, it's all in the same interface."
"With LogDNA, which brings all the logs together in an interleaved stream, it allows us to take a transaction and relate it to other contextual events making the gathering of evidence for auditors and our internal RCA much more productive."
 

Cons

"The reporting module could be a little easier to handle, as it requires quite some trial and error until you get the reports you want. Also, it would be great to have a graphical interface for the Network Intrusion Detection System's rule management."
"Reporting still needs a lot of work, especially on the vulnerability side."
"This solution could be easier to use. It is hard for some people to understand, and they need to get training and certification just to understand what it's showing them."
"I had some initial issues with some of the upgrades in version, but with the help of their support team, we were able to resolve all of them."
"Technical Support: We received average support. As observed, the support engineers take a long time for issue resolution."
"USM Anywhere relies a lot on the community putting the data in. Often, you'll right-click on the attack, but nothing will be found. That's a weakness of it."
"Its reporting tools need improvements."
"The lack of mature functionality and expertise in any of those areas is a strong negative."
"Scalability could be improved; we are using it through the IBM cloud deployment and on some of the data centers that are very heavily used, there is a significant lag in the event stream, sometimes 10, 15 minutes behind, which makes the RCA impossible."
"Every once in a while, our IBM cloud operational implementation gets behind. Sometimes, when we have a customer event, we do not get access to the latest logs for about 30 minutes, particularly for the sites that are heavily utilized. This is clearly not good. It is impossible to RCA when you can't look at the logs that pertain to the time period in which the event occurred. It could be more of an operational problem than a feature problem. I don't have visibility about whether it is a LogDNA issue or just an operational issue."
"No ability to encapsulate a query or a filter, and communicate or share that among the team."
 

Pricing and Cost Advice

"It has good pricing."
"The licensing fees are dependent on usage."
"Negotiate the best package for your environment."
"It is a product that is priced in a medium range, making it neither a cheap nor a costly product."
"Do the one month trial and try to work out the kinks during it, as it has free support and service hours."
"They are a little more expensive than Microsoft."
"It's affordable for most customers."
"Its price is in the medium to upper range."
Information not available
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
19%
Outsourcing Company
18%
Comms Service Provider
9%
Manufacturing Company
8%
Comms Service Provider
18%
Construction Company
14%
Transportation Company
14%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business65
Midsize Enterprise29
Large Enterprise25
No data available
 

Questions from the Community

What needs improvement with AT&T AlienVault USM?
There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks. It is also limited when used with bigger products and has complex password requirements.
What is your primary use case for AT&T AlienVault USM?
USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools.
Ask a question
Earn 20 points
 

Also Known As

AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity
LogDNA
 

Overview

 

Sample Customers

Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom
Instacart, Asics, Lime, Salesforce
Find out what your peers are saying about LevelBlue USM Anywhere vs. Mezmo and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.