USM Anywhere Reviews

Name: USM Anywhere
Brand: LevelBlue
Rating: 4.2 (115 reviews)

4.2 out of 5

115 reviews
92% willing to recommend

4,758 followers

What is USM Anywhere?

USM Anywhere centralizes security monitoring of networks and devices in the cloud, on premises, and in remote locations, helping you to detect threats virtually anywhere.

Get the USM Anywhere Buyer's Guide and find out what your peers are saying about USM Anywhere, CrowdStrike Falcon, Wazuh and more!

USM Anywhere is the #12 ranked solution in top Compliance Management solutions, #31 ranked solution in top Security Information and Event Management (SIEM) solutions, #42 ranked solution in Log Management Software, and #53 ranked solution in EDR tools. PeerSpot users give USM Anywhere an average rating of 8.4 out of 10. USM Anywhere is most commonly compared to CrowdStrike Falcon: USM Anywhere vs CrowdStrike Falcon. USM Anywhere is popular among the large enterprise segment, accounting for 45% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 20% of all views.

Helped 849,686 peers since 2012

Featured USM Anywhere reviews

Kris Nawani

Co-Founder/Director at Bangkok MSP Company Limited

USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools The solution offers complete coverage without the need to install additional software, as it is maintained by the vendor. It helps in saving…

Read full review

CHARLES GOLLIDAY

Chief Information Security Officer at a computer software company with 51-200 employees

I've been told that AlienVault doesn't have a full version of NES running in there, but I'm not sure if that's accurate or if my engineer made it that way. I'm not sure he was completely honest either because we had NES in the environment before. Those tools could be improved because AlienVault is a SIEM, and it added all these other features. Are they proficient in every one of those areas? Are they proficient in asset management? Is their tool good enough to be your company's vulnerability scanner? Is it good enough to be your asset manager? Is it good enough to be those additional tools? That's where I don't know if we have enough information.

Read full review

Dr. Sushan Banerjee

GISO - Global Information Security Officer at Beyon Connect

The feature that I liked the most is that they have a vulnerability assessment package that comes along with the SIEM solution. So, whenever I find any threat or alert for any of the devices or servers, I could immediately initiate a vulnerability assessment scan on that machine. That is one of a kind. The price at which AlienVault operates is also valuable. The setup of AlienVault is extremely easy. It is very simple to understand for someone who is trying a SIEM solution for the first time. The integration of servers and other devices is extremely easy. It is a piece of cake. You just double-click and start, and you are up and running. That's all.

Read full review

USM Anywhere mindshare

Product category:

As of May 2025, the mindshare of USM Anywhere in the Security Information and Event Management (SIEM) category stands at 0.9%, down from 1.9% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

PeerResearch reports based on USM Anywhere reviews

Type	Title	Date
Category	Security Information and Event Management (SIEM)	Apr 30, 2025	Download
Product	Reviews, tips, and advice from real users	Apr 30, 2025	Download
Comparison	USM Anywhere vs Splunk Enterprise Security	Apr 30, 2025	Download
Comparison	USM Anywhere vs Wazuh	Apr 30, 2025	Download
Comparison	USM Anywhere vs Microsoft Sentinel	Apr 30, 2025	Download

Title	Rating	Mindshare	Recommending
CrowdStrike Falcon	4.3	4.7%	96%	126 interviews Add to research
Wazuh	3.7	13.9%	79%	46 interviews Add to research

Valuable Features

USM Anywhere's most valuable features include event correlation, vulnerability scanning, and integrated threat detection. Users appreciate its centralized log management, ease of deployment, and customizable dashboards. The system's ability to combine SIEM, IDS, and vulnerability assessment tools streamlines security management. The Open Threat Exchange integration and real-time alerts enhance network visibility, making it a preferred choice for compliance and network monitoring. Its scalability and user-friendly interface cater to diverse security needs within organizations.

"The pricing is amazing and really cheap."
"The solution also provides basic log storage options for periods of 15, 30, and 90 days."
"The asset discovery and inventory capabilities in USM Anywhere is quite good."

Room for Improvement

USM Anywhere requires improvements in search query functionality and vulnerability scanning efficiency. It suffers from complicated deployment and setup processes. Customization, particularly in rule creation and reports, presents challenges. IPv6 support is limited, and plugin management needs enhancement. Search capabilities are slow, documentation should be clearer, and interface navigation can be confusing. Integration with third-party technologies could be enhanced, and QA before updates is necessary to prevent broken features impacting users.

"There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks."
"There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks."
"There is room for improvement in Log parsing."

ROI

Many find ROI from USM Anywhere to be positive, valuing intelligence gathered and time saved over direct financial gain. Users note significant reduction in security alert response time, cost savings on cybersecurity purchases, and manpower efficiency. Some mention benefits in meeting compliance needs and consolidation of log monitoring, enhancing alerts. For academic partners, it offers students practical exposure. Calculating exact ROI is challenging due to variables in prevented incidents.

Pricing

AlienVault USM Anywhere offers competitive pricing, making it affordable for both SMBs and enterprises. Users find its scalability and bundled features valuable, often surpassing more costly alternatives like Splunk and QRadar. Pricing is flexible, based on devices managed rather than events per second, and AlienVault frequently negotiates on costs. Unlimited endpoint licenses are advisable for large setups. Overall, its cost-effectiveness and comprehensive functionality make it an attractive choice for varied organizational needs.

"It's affordable for most customers."
"It's saved security costs."
"It is a product that is priced in a medium range, making it neither a cheap nor a costly product."

Popular Use Cases

Organizations primarily utilize USM Anywhere for log management, threat detection, and SIEM functionality, integrating it within their existing security infrastructure for enhanced visibility and compliance. It supports cloud, on-premise, and hybrid deployments, aiding in asset management and vulnerability assessments. Many employ it for forensic analysis and incident response, benefiting from its centralized logging, correlation, and alert capabilities. This tool is favored by MSSPs and MSPs for efficient monitoring of client environments and maintaining stringent security protocols.

Service and Support

USM Anywhere offers strong customer service and support, praised for helpful and knowledgeable personnel. Some users highlight quick response times and effective issue resolution, while others experience delayed responses and inconsistent quality. Technical support often excels in technical expertise, with successful handling of complex configurations and system troubleshooting. However, some users mention relying more on community resources for certain questions. Overall, the experience widely varies based on individual interactions and representatives.

Deployment

USM Anywhere's initial setup is often described as straightforward. Many find it easy to deploy, especially with guidance, despite its complexity for advanced configurations. While basic setup can be done quickly, maximizing features and customizing may require technical knowledge. Users appreciate the documentation and support available but note that understanding system intricacies takes time. Some entities choose professional assistance for setup, while others leverage training for better outcomes.

Scalability

USM Anywhere demonstrates extensive scalability, handling diverse environments efficiently. Users appreciate its ability to adapt with minimal issues, although some encounter limitations with large enterprises or high data volumes. Many benefit from cloud-based architecture, ensuring ease of scaling. While a few address specific performance restrictions when exceeding certain capacities, adding sensors or upgrading infrastructure resolves most challenges. USM Anywhere effectively supports small to medium businesses, with occasional adjustments required for larger deployments.

Stability

Users report mixed experiences with USM Anywhere's stability. Many mention a stable experience with minimal disruptions, while some note issues during updates and with high-volume log processing. Support services are praised for resolving problems effectively. Hardware adequacy and network setup are crucial for optimal performance. Scalability features are appreciated, yet some found upgrades challenging, particularly concerning sensor and logging configurations. Stability ratings often vary, but many users find it sufficient for their needs.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our USM Anywhere Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

20%

Financial Services Firm

Comms Service Provider

Educational Organization

Government

University

Manufacturing Company

Healthcare Company

Real Estate/Law Firm

Non Profit

Insurance Company

Legal Firm

Consumer Goods Company

Retailer

Construction Company

Energy/Utilities Company

Hospitality Company

Media Company

Performing Arts

Outsourcing Company

Aerospace/Defense Firm

Logistics Company

Recruiting/Hr Firm

Wellness & Fitness Company

Security Firm

Compare USM Anywhere with alternative products

Learn more about USM Anywhere

Discover

Network asset discovery
Software & services discovery
AWS asset discovery
Azure asset discovery
Google Cloud Platform asset discovery

Analyze

SIEM event correlation, auto-prioritized alarms
User activity monitoring
Up to 90-days of online, searchable events

Detect

Cloud intrusion detection (AWS, Azure, GCP)
Network intrusion detection (NIDS)
Host intrusion detection (HIDS)
Endpoint Detection and Response (EDR)

Respond

Forensics querying
Automate & orchestrate response
Notifications and ticketing

Assess

Vulnerability scanning
Cloud infrastructure assessment
User & asset configuration
Dark web monitoring

Report

Pre-built compliance reporting templates
Pre-built event reporting templates
Customizable views and dashboards
Log storage

USM Anywhere was previously known as AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity.

USM Anywhere customers

Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom