IT Central Station is now PeerSpot: Here's why

Which is the best SIEM tool for a mid-sized financial services firm: Arcsight or Securonix?

User at First Abu Dhabi Bank P.j.s.c

I work at mid-sized enterprise bank. I am researching SIEM solutions. Which is the best tool for security information and event management: Arcsight or Securonix?

PeerSpot user
1111 Answers

Abhishek RVRK Sharma - PeerSpot reviewer
Top 20Real User

That is kind of like asking - I want a car, what would you recommend? your choice of SIEM should be determined by - your use cases, your budget and your available resources. 

Securonix (I work here) is a cloud-native full functionality SIEM recognized by Gartner as a top 3 leader in their MQ for 2020. As a pioneer for UEBA tech, the Securonix SIEM platform deeply integrates advanced UEBA into SIEM functionality. The platform also offers custom content for financial institutions, with pre-built content for use cases such as SWIFT system protection and trade surveillance.

I don't know much about ArcSight, so I won't comment, but it always helps to have a SIEM that has custom content for your industry, which is regularly updated and maintained. Being cloud-native also enables better public cloud integration.

Annette Warren - PeerSpot reviewer

Since you are in financial services and your risk is high and there is compliance that your firm should be following. We would need to at least have a conversation before we recommend anything.  

I agree with the other responses this is a specific question and I would need more information to give you the best advice.  

Aji Joseph - PeerSpot reviewer
Top 5Reseller

QRadar, Splunk, or LogRythm could be better options. The success of SIEM solutions depends a lot on the expertise of the SOC team that will be managing the alerts generated by SIEM solutions. It is also worthwhile to evaluate the forensics capability of these solutions before buying.  

Simo Sim - PeerSpot reviewer

I would agree that besides the technology you also need the manpower behind it. And with regards to technology, you asked Securonix vs Arcsight. I would go with Arcsight, to gain the visibility into the logs first. I have worked with Arcsight for 8 years now as a partner and as a customer. We were able to ingest logs from anywhere, we were able to ingest logs from anything - custom applications, custom logs - not to mention the logs from the usual security devices - and you also get the OOB support for a lot of devices - Sales claims they have the broadest support with regards to other SIEM vendors. 

Yes it was said that it was dated, but they are really making strides to modernize the solution and they will also integrate a Machine Learning UEBA from Interset. My suggestion would be to deploy a SIEM first, which can then be upgraded with an UEBA solution. 

Joseph Slattery - PeerSpot reviewer

To be upfront 

I am a security vendor and we are the authors and developers of Snare our SIEM-agnostic Enterprise solution for log collection and log management. 

We work with lots of Siem vendors and Snare deploys and integrates with all major SIEM platforms e.g. Arcsight, Qradar, Splunk, RSA. We have over 500 Banks and financial services companies using Snare Agents and Snare central where we have been able to contain and reduce their Siem ingestion charges by up to 60% where the Siem vendor charges for log data ingestion by EPS, GB or any metered basis -

Snare collaborates and compliments SIEM solutions. Snare Agents provide Granular Filtering @ Source, Truncation of Noise out of logs @ Source in a lightweight Agent. Snare Central provides dashboard analytics to monitor log traffic from windows, Linux, Unix, OSX, Syslog feeds etc.while also providing "Out of the Box Compliance Reporting, Alerts" and ability to reflect logs to multiple destinations simultaneously. 

From our experience, Arcsight is a good SIEM, very feature-rich but does require a lot of resources and is generally very expensive one-time and ongoing ingestion of logs into Arcsight (unless you have Snare). Arcsight connectors provide an agentless collection process but this has many issues as it is not as secure as Agents and can invite log tampering, no encryption, unable to set group policy etc...

I have lots of my customers using Snare Agents with logs going to Arcsight and can provide a reference point if required. My largest financial services customer has over 100,000 Snare agents filtering, reflecting logs to Arcsight. Please take a look at

Andrés Batista - PeerSpot reviewer

Securonix is a good SIEM tool, even if you want to use it as a service (SaaS) solution. 

UTMStack is another Next-Gen SIEM that delivers cybersecurity services like Penetration Testing, Vulnerability Assessment, SOC-as-a-Service, and others at a cost-effective price.

Both are recommendable, and your election depends on what you need.

Consulta85d2 - PeerSpot reviewer

Neither, or both. 

Having done literally thousands of SIEM deployments, I can tell you from experience that the technology choice isn't the most important choice. The critical choice is in the resources and commitment to manage and use the system. I've seen countless SIEM implementations fail over the longer term, including all of the big names, because too many people treat it like a "set it and forget it" system. It is most definitely not. A SIEM or UEBA platform is a tool that must be monitored, tuned, and used every day. So I would recommend to you that you spend less time figuring out which technology is the "best" and more time building a plan to integrate it, manage it, and fully utilize it. Or selecting a good team to do that for you.

Himanshu Shah - PeerSpot reviewer
Top 20Real User

Arcsight is a legacy SIEM a Ro-bust log management tool however works on EPS ( Events per second) costing, which mounts recurring cost on year on year basis. However Securonix SIEM based on Data Lake and Advanced Analytics or  UEBA suite which provides rich context of any insider threat. You can also have Incident Responder and Threat hunting along with automated response with Play books with add on SOAR tool. I think for a mid-ranged bank Securonix may suite better , also one can have this as service by Cloud service for above tools if options available for the same.

Angel Rivera Baez - PeerSpot reviewer
Real User

We didn’t use any of the products but I include you a link to Gartner comparison.

Rishan-Ahmed - PeerSpot reviewer
Top 5LeaderboardMSP

I recommend ArcSight as it has many proven advantages. in terms pricing and technology. 

Buyer's Guide
ArcSight Enterprise Security Manager (ESM) vs. Securonix Next-Gen SIEM
May 2022
Find out what your peers are saying about ArcSight Enterprise Security Manager (ESM) vs. Securonix Next-Gen SIEM and other solutions. Updated: May 2022.
608,010 professionals have used our research since 2012.