Gartner Magic Quadrant: Security Information and Event Management (SIEM) for MSSPs?

by Joe Panettieri • Jun 2, 2017

Welcome to Page 2 of 2.

Here are companies in the Visionaries, Challengers and Leaders quadrants.

SIEM Gartner Magic Quadrant: Visionaries

• AlienVault: The AlienVault Unified Security Management (USM) solution provides SIEM, vulnerability assessment (VA), asset discovery, network and host intrusion detection (NIDS/HIDS), flow and packet capture, and file integrity monitoring (FIM), Gartner notes. MSSP Friendly?: Yes.

SIEM Gartner Magic Quadrant: Challengers

• Dell EMC (RSA): Here, the product to know is RSA Security Analytics. MSSP Friendly?: We haven’t heard from RSA in this area…

SIEM Gartner Magic Quadrant: Leaders

• HP Enterprise: The company’s ArcSight Enterprise Security Manager (ESM) is a threat detection, analysis, triage, and compliance management SIEM platform, HPE says. MSSP Friendly?: Perhaps. We’ve heard promises from HPE to more aggressively embrace MSPs over the years. But I don’t see a clear-cut MSSP partner program for ArcSight.
• IBM: No doubt, IBM Security is big business for the technology giant. And IBM Security QRadar SIEM is a key piece of that business. MSSP Friendly?: IBM touts MSP relationships at the company’s annual PartnerWorld conference. But IBM itself also is an MSSP.
• LogRhythm: The company’s key offering in this market is aptly called LogRhythm SIEM. MSSP Friendly?: Yes. In fact, Deloitte leverages LogRhythm in its managed security services business practice, the IT consulting firm confirmed this week.
• McAfee (formerly Intel Security): Here, the product to watch is McAfee Enterprise Security Manager. MSSP Friendly? Increasingly yes after some earlier stumbles in the market.
• Splunk: The company’s Splunk Enterprise Security is a SIEM offering that “provides insight into machine data generated from security technologies such as network, endpoint, access, malware, vulnerability and identity information.” MSSP Friendly?: Splunk has been building and expanding its partner program. Many MSPs already use the company’s tools. But a formalized engagement process for those MSPs and MSSPs is just coming into focus.

Bottom Line

Of the 14 companies in this particular Gartner Magic Quadrant, roughly five have been absolutely committed to MSSPs with clear communications. Several more have some MSSP engagement strategies under way.

If you disagree with our views or have a different take on the market please email me ([email protected]) or post a comment.

By the way, here’s how Gartner displays the SIEM Magic Quadrant for 2016: