Abstract

This IDC study provides a vendor assessment of those offering security information and event management (SIEM) platforms. Using the IDC MarketScape model, we considered SIEM vendors based on quantitative and qualitative criteria that is important to organizations selecting an SIEM. The assessment is based on a comprehensive and rigorous framework that includes vendor and customer interviews to evaluate how each vendor stacks up, and the framework highlights the key factors that are expected to be the most significant for achieving success in the SIEM market over the short term and long term.

"SIEM buyers need to consider the rest of their security environment when choosing an SIEM. Does the SIEM have integrations with tools in place or under purchase consideration? Does the pricing allow some level of predictability and options for data storage? Does the SIEM have built-in automations that allow analysts to reduce time spent on investigation, particularly on alerts that are false positives? Does the SIEM vendor offer the level of support that meets the buyer's maturity? All these are important considerations, which should drive buyers to check out SIEM vendors they may not have considered in their last purchase decision." — Michelle Abraham, research director, Security and Trust at IDC.

Coverage