The data correlation feature in ArcSight Security Orchestration Automation Response helps to improve incident response times, but I believe that there are many other things that need to be done. The competition is coming up with new jargons and new features that need to be taken into account. I believe that ArcSight Security Orchestration Automation Response also has to change the user experience slightly to a phase-based view, which seems to be slightly dull, and many times customers or partners have reported this back. The UI could be slightly better and that is an area for improvement. ArcSight Security Orchestration Automation Response is taking an edge lesser than the competition. When I look at that, there is Splunk, Exabeam, Gurucul, Securonix, and others that are taking quite a leverage in the market. Three or four years ago, the market ratio was about 40 to 45% captured by ArcSight Security Orchestration Automation Response, but now it has been reduced to 10 to 12%. As much as the competition needs to be evaluated on the functionality perspective, I think ArcSight Security Orchestration Automation Response is losing its ground, so it needs to buckle up.
Find out what your peers are saying about OpenText, Elastic, Coralogix and others in Security Information and Event Management (SIEM). Updated: May 2026.
SIEM integrates real-time monitoring with advanced analysis of security events. It consolidates functions to provide comprehensive threat detection and response, enhancing organizational security measures.SIEM solutions offer extensive threat intelligence, enabling security teams to detect anomalies and incidents effectively. They provide a centralized view of an organization's security posture, combining various data sources and offering sophisticated correlation and monitoring tools....
The data correlation feature in ArcSight Security Orchestration Automation Response helps to improve incident response times, but I believe that there are many other things that need to be done. The competition is coming up with new jargons and new features that need to be taken into account. I believe that ArcSight Security Orchestration Automation Response also has to change the user experience slightly to a phase-based view, which seems to be slightly dull, and many times customers or partners have reported this back. The UI could be slightly better and that is an area for improvement. ArcSight Security Orchestration Automation Response is taking an edge lesser than the competition. When I look at that, there is Splunk, Exabeam, Gurucul, Securonix, and others that are taking quite a leverage in the market. Three or four years ago, the market ratio was about 40 to 45% captured by ArcSight Security Orchestration Automation Response, but now it has been reduced to 10 to 12%. As much as the competition needs to be evaluated on the functionality perspective, I think ArcSight Security Orchestration Automation Response is losing its ground, so it needs to buckle up.