USM Anywhere Reviews

Name: USM Anywhere
Brand: LevelBlue
Rating: 4.2 (115 reviews)

4.2 out of 5

115 reviews
92% willing to recommend

What is USM Anywhere?

USM Anywhere centralizes security monitoring of networks and devices in the cloud, on premises, and in remote locations, helping you to detect threats virtually anywhere.

Get the USM Anywhere Buyer's Guide and find out what your peers are saying about USM Anywhere, CrowdStrike Falcon, Wazuh and more!

USM Anywhere is the #13 ranked solution in top Compliance Management solutions, #32 ranked solution in top Security Information and Event Management (SIEM) solutions, #45 ranked solution in Log Management Software, and #51 ranked solution in EDR tools. PeerSpot users give USM Anywhere an average rating of 8.4 out of 10. USM Anywhere is most commonly compared to CrowdStrike Falcon: USM Anywhere vs CrowdStrike Falcon. USM Anywhere is popular among the large enterprise segment, accounting for 40% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 17% of all views.

Helped 865,295 peers since 2012

Featured USM Anywhere reviews

Kris Nawani

Co-Founder/Director at Bangkok MSP Company Limited

USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools The solution offers complete coverage without the need to install additional software, as it is maintained by the vendor. It helps in saving…

Read full review

Oluwatoyese Agoro

Information Security Engineer at Infoprive

The only issue that you need to bypass is the issue with integration with some other log sources, some other application security applications. The issue is still present. The process of collecting logs from applications that do not have an alien app or alien routes can be made a little bit better. Once there is no alien app, it's always very difficult to collect logs from third-party applications. So, the process of collecting logs from third-party applications is something that needs to be improved. Also, when it comes to parsing of some logs, I've worked with another solution that has a custom parsing feature that can assist you in creating the custom parsing rule by yourself. But for any of those, USM needs to reach out to the engineering team, which takes months to come up with. There is room for improvement in Log parsing. So when there are logs that are being parsed, we need to create a custom parsing rule to correctly parse some event logs. I've worked with a solution that has a feature that helps you to create custom parsing rules. But for enablement, we need to escalate to their engineering team, which takes months before they can respond and give you that parsing rule.

Read full review

Omer Jamil

Supervisor, Security Operations at Bpm

To those who plan to use the solution, I would suggest that they go through the documentation and online training models available for free, as it can help you deploy the product quickly while also being helpful in areas where there is a need to understand correlation and monitoring. I rate the overall product a seven out of ten.

Read full review

USM Anywhere mindshare

Product category:

As of August 2025, the mindshare of USM Anywhere in the Security Information and Event Management (SIEM) category stands at 0.9%, down from 1.3% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

PeerResearch reports based on USM Anywhere reviews

Type	Title	Date
Category	Security Information and Event Management (SIEM)	Aug 20, 2025	Download
Product	Reviews, tips, and advice from real users	Aug 20, 2025	Download
Comparison	USM Anywhere vs Splunk Enterprise Security	Aug 20, 2025	Download
Comparison	USM Anywhere vs Wazuh	Aug 20, 2025	Download
Comparison	USM Anywhere vs Microsoft Sentinel	Aug 20, 2025	Download

Title	Rating	Mindshare	Recommending
CrowdStrike Falcon	4.3	4.7%	96%	132 interviews Add to research
Wazuh	3.7	11.8%	80%	48 interviews Add to research

Valuable Features

USM Anywhere's most valuable features include event correlation, vulnerability scanning, and integrated threat detection. Users appreciate its centralized log management, ease of deployment, and customizable dashboards. The system's ability to combine SIEM, IDS, and vulnerability assessment tools streamlines security management. The Open Threat Exchange integration and real-time alerts enhance network visibility, making it a preferred choice for compliance and network monitoring. Its scalability and user-friendly interface cater to diverse security needs within organizations.

"The pricing is amazing and really cheap."
"The solution also provides basic log storage options for periods of 15, 30, and 90 days."
"The asset discovery and inventory capabilities in USM Anywhere is quite good."

Room for Improvement

USM Anywhere requires improvements in search query functionality and vulnerability scanning efficiency. It suffers from complicated deployment and setup processes. Customization, particularly in rule creation and reports, presents challenges. IPv6 support is limited, and plugin management needs enhancement. Search capabilities are slow, documentation should be clearer, and interface navigation can be confusing. Integration with third-party technologies could be enhanced, and QA before updates is necessary to prevent broken features impacting users.

"There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks."
"There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks."
"There is room for improvement in Log parsing."

ROI

Many find ROI from USM Anywhere to be positive, valuing intelligence gathered and time saved over direct financial gain. Users note significant reduction in security alert response time, cost savings on cybersecurity purchases, and manpower efficiency. Some mention benefits in meeting compliance needs and consolidation of log monitoring, enhancing alerts. For academic partners, it offers students practical exposure. Calculating exact ROI is challenging due to variables in prevented incidents.

Pricing

AlienVault USM Anywhere offers competitive pricing, making it affordable for both SMBs and enterprises. Users find its scalability and bundled features valuable, often surpassing more costly alternatives like Splunk and QRadar. Pricing is flexible, based on devices managed rather than events per second, and AlienVault frequently negotiates on costs. Unlimited endpoint licenses are advisable for large setups. Overall, its cost-effectiveness and comprehensive functionality make it an attractive choice for varied organizational needs.

"It's affordable for most customers."
"It's saved security costs."
"It is a product that is priced in a medium range, making it neither a cheap nor a costly product."

Popular Use Cases

Organizations primarily utilize USM Anywhere for log management, threat detection, and SIEM functionality, integrating it within their existing security infrastructure for enhanced visibility and compliance. It supports cloud, on-premise, and hybrid deployments, aiding in asset management and vulnerability assessments. Many employ it for forensic analysis and incident response, benefiting from its centralized logging, correlation, and alert capabilities. This tool is favored by MSSPs and MSPs for efficient monitoring of client environments and maintaining stringent security protocols.

Service and Support

USM Anywhere offers strong customer service and support, praised for helpful and knowledgeable personnel. Some users highlight quick response times and effective issue resolution, while others experience delayed responses and inconsistent quality. Technical support often excels in technical expertise, with successful handling of complex configurations and system troubleshooting. However, some users mention relying more on community resources for certain questions. Overall, the experience widely varies based on individual interactions and representatives.

Deployment

USM Anywhere's initial setup is often described as straightforward. Many find it easy to deploy, especially with guidance, despite its complexity for advanced configurations. While basic setup can be done quickly, maximizing features and customizing may require technical knowledge. Users appreciate the documentation and support available but note that understanding system intricacies takes time. Some entities choose professional assistance for setup, while others leverage training for better outcomes.

Scalability

USM Anywhere demonstrates extensive scalability, handling diverse environments efficiently. Users appreciate its ability to adapt with minimal issues, although some encounter limitations with large enterprises or high data volumes. Many benefit from cloud-based architecture, ensuring ease of scaling. While a few address specific performance restrictions when exceeding certain capacities, adding sensors or upgrading infrastructure resolves most challenges. USM Anywhere effectively supports small to medium businesses, with occasional adjustments required for larger deployments.

Stability

Users report mixed experiences with USM Anywhere's stability. Many mention a stable experience with minimal disruptions, while some note issues during updates and with high-volume log processing. Support services are praised for resolving problems effectively. Hardware adequacy and network setup are crucial for optimal performance. Scalability features are appreciated, yet some found upgrades challenging, particularly concerning sensor and logging configurations. Stability ratings often vary, but many users find it sufficient for their needs.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our USM Anywhere Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

17%

Comms Service Provider

10%

Financial Services Firm

Educational Organization

Government

University

Performing Arts

Manufacturing Company

Non Profit

Healthcare Company

Legal Firm

Consumer Goods Company

Construction Company

Real Estate/Law Firm

Energy/Utilities Company

Retailer

Transportation Company

Insurance Company

Hospitality Company

Logistics Company

Recreational Facilities/Services Company

Security Firm

Media Company

Outsourcing Company

Wellness & Fitness Company

Recruiting/Hr Firm

Renewables & Environment Company

Compare USM Anywhere with alternative products

Learn more about USM Anywhere

Discover

Network asset discovery
Software & services discovery
AWS asset discovery
Azure asset discovery
Google Cloud Platform asset discovery

Analyze

SIEM event correlation, auto-prioritized alarms
User activity monitoring
Up to 90-days of online, searchable events

Detect

Cloud intrusion detection (AWS, Azure, GCP)
Network intrusion detection (NIDS)
Host intrusion detection (HIDS)
Endpoint Detection and Response (EDR)

Respond

Forensics querying
Automate & orchestrate response
Notifications and ticketing

Assess

Vulnerability scanning
Cloud infrastructure assessment
User & asset configuration
Dark web monitoring

Report

Pre-built compliance reporting templates
Pre-built event reporting templates
Customizable views and dashboards
Log storage

USM Anywhere was previously known as AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity.

USM Anywhere customers

Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom