Unified Security Management (USM) Platform

Get Complete Security Visibility
in as Little as 30 Minutes

AlienVault Unified Security Management™ (USM) is an all-in-one platform designed and priced to ensure that mid-market organizations can effectively defend themselves against today’s advanced threats.

Download A Free Trial

Unlike traditional SIEM or security point products, AlienVault USM provides:

Unified, Coordinated Security Monitoring
Simple Security Event Management and Reporting
Continuous Threat Intelligence
Fast Deployment
Multiple Security Functions Without Multiple Consoles

AlienVault Unified Security Management™:

Better Threat Detection for Effective Response

Our goal is to provide you with a unified threat detection and compliance management solution that is both easy-to-use and affordable. We’ve built all of the essential security capabilities you need into one Unified Security Management platform, which is then powered by up-to-the-minute threat intelligence from AlienVault Labs and our Open Threat Exchange— the world’s first truly open threat intelligence community that enables collaborative defense with actionable community-powered threat data.
The result is a powerful solution that delivers on its promise of complete security visibility

The Unified Security Management Difference

5 Essential Security Capabilities in a Single Console

The AlienVault Unified Security Management (USM) platform provides five essential security capabilities in a single console, giving you everything you need to manage both compliance and threats. Understanding the sensitive nature of IT environments, we include active, passive and host-based technologies so that you can match the requirements of your particular environment.

Asset Discovery

Find all assets on your network before a bad actor does

Active Network Scanning
Passive Network Monitoring
Asset Inventory
Software Inventory

Vulnerability Assessment

Identify systems on your network that are vulnerable to exploits

Network Vulnerability Testing
Continuous Vulnerability Monitoring

Intrusion Detection

Detect malicious traffic on your network

Network IDS
Host IDS
File Integrity Monitoring (FIM)

Behavioral Monitoring

Identify suspicious behavior and potentially compromised systems

Netflow Analysis
Service Availability Monitoring
Full packet capture

SIEM

Correlate and analyze security event data from across your network

Log Management
Event Correlation
Incident Response
Reporting and Alarms

Reviews of AlienVault Unified Security Management™ on

More Than Just a SIEM

– It’s Unified Security Management!

Traditional SIEM solutions promise to provide what you need – but the path to get there is one most of us can’t afford. Traditional SIEM solutions integrate and analyze the data produced by other security technologies that are already deployed, but unfortunately most mid-market organizations don’t have those other technologies deployed yet!

AlienVault USM provides a different path. In addition to all the functionality of a traditional SIEM, AlienVault USM also builds the essential security capabilities into a single platform with no additional feature charges. And AlienVault’s focus on ease of use and deployment makes it the perfect fit for mid-market enterprises and organizations with limited budget and few in-house resources.

Try It Free For 30 Days

Features:	AlienVault USM	Traditional SIEM
Management:
Log Management
Event Management
Event Correlation
Reporting
Trouble Ticketing	Built-In	$$ (3rd-party product that requires integration)
Security Monitoring Technologies:
Asset Discovery	Built-In	$$ (3rd-party product that requires integration)
Network IDS	Built-In	$$ (3rd-party product that requires integration)
Host IDS	Built-In	$$ (3rd-party product that requires integration)
Netflow	Built-In	$$ (3rd-party product that requires integration)
Full Packet Capture	Built-In	$$ (3rd-party product that requires integration)
File Integrity Monitoring	Built-In	$$ (3rd-party product that requires integration)
Vulnerability Assessment	Built-In	$$ (3rd-party product that requires integration)
Additional Capabilities:
Continuous Threat Intelligence	Built-In	Not Available
Unified Management Console for security monitoring technologies	Built-In	Not Available

110 Million
credit cards were compromised by the Target security
breach during the 2013 Christmas shopping season.

Source: Krebs on Security

Assess Detect Respond with USM

Assess the Network to Find Devices, Services and Vulnerabilities

Within minutes of installing the USM product, our asset discovery features - Active Network Scanning, Passive Network Monitoring, Asset Inventory, - will provide you visibility into the assets on your network, what software is installed on them, how they’re configured, any potential vulnerabilities and active threats being executed against them. You’ll be able to quickly answer questions such as:

What devices are on my network?
What are users doing?
What vulnerabilities exist in my network?
Are there known attackers trying to interact with my network?
Are there active threats in my network?

Detect Threats Quickly and Accelerate Compliance

Unlike preventative-only security tools (e.g., firewalls, anti-virus, etc.), and single-purpose monitoring tools (SIEM, IDS, vulnerability assessment, log management, etc.), AlienVault’s USM platform provides a unified approach to threat detection and compliance management.

We don’t make false promises of 100% protection with our USM platform, but rather quickly detect threats and accelerate compliance by delivering unified and coordinated security monitoring capabilities, powered by the latest threat intelligence and access to a community of practitioners for collaborative defense.

PCI, HIPAA, Sarbanes-Oxley and other compliance mandates are an ongoing concern for many of our customers. AlienVault USM makes your compliance task easier by:

Providing you a quick and easy way to deploy the security technology necessary for many of the compliance requirements
Allowing you to determine performance against compliance requirements, such as mandated vulnerability scans, access controls, logging and retention of logs
Allowing you to manage and ensure performance of ongoing compliance tasks
Providing compliance reports to inform management and help you pass audits

Detect the Latest Threats
(Without Your Own Research Team)

Busy IT security teams don’t have the time or the resources to research the latest threats on their own. AlienVault Labs threat research team spends countless hours mapping out the different types of attacks, the latest threats, suspicious behavior, vulnerabilities and exploits they uncover across the entire threat landscape. They leverage the power of OTX, the world’s largest community-powered repository of threat data to provide global insight into attack trends and bad actors.

The AlienVault Labs Threat Intelligence regularly publishes threat intelligence updates to the USM platform in the form of correlation directives, IDS signatures, vulnerability audits, asset discovery signatures, IP reputation data, data source plugins, and report templates.

Learn More About our Threat Intelligence >

Discover the Easiest Way to Get Complete Security Visibility and Actionable Threat Intelligence

AlienVault USM Delivers

Achieving complete security visibility can be time-consuming, costly and complex. Collecting the right data, aggregating it, normalizing and correlating disparate technologies for a complete view of your security posture isn’t trivial. Discover a new way with AlienVault.

Ownership of the built-in data sources and management platform, coupled with unmatched security expertise delivered by the AlienVault Labs team of security experts, provides effective security controls and seamlessly integrated threat intelligence for any environment.

Complete Visibility for Immediate Answers

By building in the essential security capabilities, AlienVault USM significantly reduces complexity and reduces deployment time so that you can go from installation to first insight in about an hour. With thousands of event correlation rules built in, and the ability to create custom event correlation rules, you’ll be able to quickly answer questions such as:

What’s happening right now that could signal a data breach?
What do I need to do right now in order to prevent service outages or malware outbreaks?
Are the security controls in place doing their job? Or do I need to reconfigure our defenses?
Where do we need to focus in order to be ready for our audit next week?

Get Immediate Results on Day One

Within the first day of installation you’ll be able to:

Prioritize risk through correlation of reputation, threat severity and asset vulnerability
Run risk assessment and vulnerability reports of affected assets
Detect threats through correlation of firewall logs & Windows events
Get a forensic view into stored logs
Deploy the technology needed to comply with requirements in: PCI DSS, HIPAA, ISO 27002, SOX, GPG 13 and more.

Interested in exploring more?

Download our free trial to get some hands on experience in your environment.

Download a Free Trial

Take a Product Tour.

Next Previous

Real-time threat intelligence utilizes kill-chain taxonomy to identify attackers, their victims, their methods and their intents.

Each alarm provides detailed and customized instructions on how to investigate and respond to malicious activity.

Customizable executive dashboards provide overviews and click-through details about your security and compliance posture.

All you need to know about an asset for incident investigation and response – in one window.

Automated asset discovery provides granular details on all devices in your network.

Targeted guidance eliminates the guesswork associated with integrating data sources and provides precise suggestions for improving visibility.

Built-in network flow analysis provides all the data you need for in-depth investigations – including packet capture.

Secure storage of raw event data satisfies regulatory compliance requirements while an easy-to-use interface allows for quick searches.

Identify malicious actors attempting to interact with your network using our dynamic IP reputation data.

Centralized, integrated "how to" documentation for all you need to know about USM.

Built-in network IDS and host IDS results in more accurate threat detection and event correlation, faster deployment and simpler management.

Built-in vulnerability assessment simplifies security monitoring and speeds remediation.