Anomali vs Gigamon Deep Observability Pipeline comparison

Anomali and Gigamon are both solutions in the Security Information and Event Management (SIEM) category. Anomali is ranked #32 with an average rating of 8.5, while Gigamon is ranked #44 with an average rating of 8.5. Anomali holds a 1.3% mindshare in SIEM, compared to Gigamon’s 0.5% mindshare. Additionally, 80% of Anomali users are willing to recommend the solution, compared to 100% of Gigamon users who would recommend it.

Anomali

Read 4 Anomali reviews

6,575 Views
1,907 Comparison Views

80% willing to recommend

Gigamon Deep Observability ...

Read 9 Gigamon Deep Observability Pipeline reviews

6,561 Views
722 Comparison Views

100% willing to recommend

Anomali

Gigamon Deep Observability ...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 18, 2026

Gigamon Deep Observability Pipeline and Anomali are major players in network observability and threat intelligence respectively. Gigamon appears stronger in delivering comprehensive network insights, while Anomali holds the edge in advanced threat intelligence analytics.

Features: Gigamon Deep Observability Pipeline provides robust network traffic monitoring, packet-level analysis, and deep insights into network performance and security threats. Anomali's capabilities include extensive threat intelligence functionalities, leveraging large datasets to proactively identify and respond to threats, utilizing advanced analytic capabilities, and prioritizing threat intelligence.

Room for Improvement: Gigamon could enhance traffic flow analysis, expand on intelligence offerings, and improve data deduplication features. Anomali might benefit from broadening its data sets, streamlining its configuration processes, and integrating more comprehensive network visibility features.

Ease of Deployment and Customer Service: Gigamon's deployment process is typically straightforward, supported by strong vendor guidance for smooth integration. Anomali offers a cloud-based model that simplifies deployment but can be complex to configure, with comprehensive customer service during initial setup aiding this process.

Pricing and ROI: Gigamon's higher initial setup cost is justified by extensive features providing significant network observability benefits, while its return on investment is solid for network-focused organizations. Anomali presents a competitive pricing structure with strong ROI through heightened security postures, balancing cost-effectiveness with advanced threat detection capabilities.

To learn more, read our detailed Anomali vs. Gigamon Deep Observability Pipeline Report (Updated: April 2026).

Buyer's Guide

Anomali vs. Gigamon Deep Observability Pipeline

April 2026

Download the complete report

Helped 893,244 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Anomali

Ranking in Security Information and Event Management (SIEM)

32nd

Ranking in Advanced Threat Protection (ATP)

21st

Average Rating

7.8

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (12th), Threat Intelligence Platforms (TIP) (8th), Extended Detection and Response (XDR) (22nd)

Gigamon Deep Observability ...

Ranking in Security Information and Event Management (SIEM)

44th

Ranking in Advanced Threat Protection (ATP)

26th

Average Rating

8.6

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (43rd), Event Monitoring (14th), Data Loss Prevention (DLP) (32nd), Web Application Firewall (WAF) (33rd), Network Packet Broker (NPB) (1st), Network Detection and Response (NDR) (16th)

Mindshare comparison

As of May 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Anomali is 1.3%, up from 0.2% compared to the previous year. The mindshare of Gigamon Deep Observability Pipeline is 0.5%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Anomali	1.3%
Gigamon Deep Observability Pipeline	0.5%
Other	98.2%

Security Information and Event Management (SIEM)

Featured Reviews

ChrisCollins

Enterprise Security Architect V at FirstEnergy

Enables automated threat intelligence sorting and enhances proactive threat hunting capabilities

You have to have at least a threat intelligence background or a SOC analyst background to use it, as that's the information you'll dig around with in there. If you don't have that kind of knowledge, it probably can be a little hard to use, but they do provide training. They offer training not only for how to use the platform but also some basic threat intelligence training to explain what these things are and what these terms mean. My company is a customer of Anomali. I would recommend it to other people. I would advise making sure you don't pick it without testing other products and have your use cases well thought out and documented before testing, so you know it will solve the problems you're trying to address. Keep an open mind with it and realize that whatever you can dream of, you can probably do with the platform. Overall, I would rate Anomali an eight out of ten.

Read full review

TuanNguyen13

Senior Relationship Banker at Joint stock Commercial Bank for Foreign Trade of V

Experience boosts operational efficiency while performance sees room for improvement

I don't have specific information on whether it was purchased on the AWS marketplace or somewhere else. I am working with Dynatrace Operator. I am also working with Algosec, Alluvio, CrowdStrike, Firemon, Gigamon Deep Observability Pipeline, and other solutions. I think it's a good tool, and I am satisfied with it. We have not stored cloud workloads with Gigamon Deep Observability Pipeline yet; we are still on-premises. The technical support takes about one to two hours to respond, which is acceptable. I am satisfied with the scalability of the product. The interface is good.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable aspect of Anomali is the threat modeling capability."

"I have found Cyber threat intelligence (CTI) very useful and concise. The solution is easy to use."

"The feature I have found most valuable is credential monitoring. This feature is easy and quick."

"We now have a very robust collection of threat intelligence based on the capabilities that Anomali provides."

"I have found Cyber threat intelligence (CTI) very useful and concise. The solution is easy to use."

"It has high stability."

"The solution is straightforward to set up."

"It is a good product. It provides network visibility, which is important. Gigamon can bring some optimizations to my network. It is helpful for security inspection, and it makes my firewall work fast because my firewall doesn't have to do the inspection of the SSL connections, for example."

"It offers straightforward integration."

"The tool's most valuable feature is the encryption feature. From a security perspective, the solution hasn't significantly strengthened our security posture. However, it has greatly improved performance by streamlining encryption processes and avoiding encryption at multiple layers. This has also simplified troubleshooting, as we can whitelist certain processes."

"The Pipeline's Comprehensive Insights into data flows have helped improve operational efficiency and security."

"It is a good product, it provides network visibility, which is important, Gigamon can bring some optimizations to my network, it is helpful for security inspection, and it makes my firewall work fast because my firewall doesn't have to do the inspection of the SSL connections, for example."

"We use Gigamon for network visibility."

More Gigamon Deep Observability Pipeline pros

Cons

"An area for improvement is the intelligence sharing within the Anomali community. The tagging system can be inconsistent, as any company can use any tags for their reporting."

"Anomali Enterprise could improve by combining all the other tools' features into one solution."

"A lot of tools can give you many features, such as CTI intelligence and a tax service reduction. However, many people are combining different tools together to have more capabilities. It is up to the consumer whether they want to have multiple tools or have one tool that serves the purpose. Anomali Enterprise could improve by combining all the other tools' features into one solution."

"Less code in integration would be nice when building blocks."

"Support in the past has been top-notch, but recent trends indicate that it has taken a back seat, as we often don't get answers for days."

"It only inspects a specific kind of traffic. There should be different kinds of use cases."

"The graphical user interface could be improved."

"The security should be improved."

"In terms of improvement, while the initial setup is not overly complicated, we did encounter a few issues."

"It only inspects a specific kind of traffic."

"Gigamon Deep Observability Pipeline needs to improve its performance. I face issues with performance because we use SPAN, and the SPAN traffic is not good."

"Its filtering feature needs improvement."

"The Gigamon Deep Observability Pipeline should have a feature showing the traffic flow within its platform. Currently, customers have to use separate tools for monitoring, which is inconvenient. If it had its visibility feature, it would make monitoring easier and more complete without needing extra tools."

More Gigamon Deep Observability Pipeline cons

Pricing and Cost Advice

"When comparing the price of Anomali Enterprise to other solutions it is in the medium to high range. However, I am satisfied with the price."

"I would rate the solution as expensive, around an eight or nine out of ten. There are other competitive solutions available."

"The solution is highly-priced."

"The solution's price is reasonable."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

893,244 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Manufacturing Company

Computer Software Company

Construction Company

Financial Services Firm

14%

Computer Software Company

10%

Comms Service Provider

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	2
Midsize Enterprise	1
Large Enterprise	5

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	1
Large Enterprise	5

Questions from the Community

What needs improvement with Anomali ThreatStream?

An area for improvement is the intelligence sharing within the Anomali community. The tagging system can be inconsistent, as any company can use any tags for their reporting. Combining all aliases ...

See all answers

What is your primary use case for Anomali ThreatStream?

I use Anomali ( /products/anomali-reviews ) for threat hunting, threat collection, operationalization of intelligence, such as indicators of compromise (IOCs), and dissemination of reports for repo...

See all answers

What advice do you have for others considering Anomali ThreatStream?

For new users, I recommend taking the training provided by Anomali as it is very well articulated. I advise reading the user manual and taking the instructor-led training sessions from the customer...

See all answers

What needs improvement with Gigamon Deep Observability Pipeline?

Gigamon Deep Observability Pipeline needs to improve its performance. I face issues with performance because we use SPAN, and the SPAN traffic is not good. They need to improve their performance.

See all answers

What is your primary use case for Gigamon Deep Observability Pipeline?

I am working with Gigamon Deep Observability Pipeline and Firemon, and I have been working with it for a year.

See all answers

What advice do you have for others considering Gigamon Deep Observability Pipeline?

See all answers

Comparisons

ThreatConnect Threat Intelligence Platform (TIP) vs Anomali

Compared 5% of the time

Recorded Future vs Anomali

Compared 5% of the time

Splunk Enterprise Security vs Anomali

Compared 3% of the time

Hunters vs Anomali

Compared 3% of the time

IBM Security QRadar vs Anomali

Compared 3% of the time

More Anomali Competitors

Ixia Network Packet Brokers vs Gigamon Deep Observability Pipeline

Compared 5% of the time

Cisco Nexus Dashboard Data Broker vs Gigamon Deep Observability Pipeline

Compared 4% of the time

Niagara Packet Brokers vs Gigamon Deep Observability Pipeline

Compared 4% of the time

NETSCOUT nGeniusONE vs Gigamon Deep Observability Pipeline

Compared 3% of the time

Grafana vs Gigamon Deep Observability Pipeline

Compared 3% of the time

More Gigamon Deep Observability Pipeline Competitors

Product Reports

Buyer's Guide

Threat Intelligence Platforms (TIP)

April 2026

Download Anomali product report

Buyer's Guide

Event Monitoring

May 2026

Gigamon Deep Observability Pipeline report

Download Gigamon Deep Observability Pipeline product report

Also Known As

Match, Lens, ThreatStream, STAXX, Anomali Security Analytics

Gigamon, GigaSecure

Overview

Anomali delivers user-friendly cyber threat intelligence, offering concise insights with robust capabilities for evolving scenarios.

Anomali offers a powerful platform for cyber threat intelligence, allowing organizations to efficiently stream and analyze threat feeds. It excels in threat modeling, prioritizing intelligence, and supporting large-scale automation through its API, fostering a proactive security approach.

What are Anomali's Key Features?

Threat Intelligence: Provides concise and user-friendly intelligence.
Threat Modeling: Enables prioritization and efficient organization of intelligence.
Credential Monitoring: Performs quickly with efficient dataset handling.
API Automation: Supports large-scale automation for robust intelligence management.
Adaptability: Offers capabilities to grow beyond initial use cases.

Which Benefits or ROI Should Users Consider?

Efficient Intelligence Collection: Quickly gathers and organizes data for use.
Enhanced Threat Analysis: Correlates data effectively for proactive security.
Automation Support: Saves time with extensive API capabilities.
Scalability: Adapts and scales with emerging security needs.

Anomali serves as a crucial tool for threat intelligence in industries ranging from finance to healthcare. Organizations stream threat feeds into Anomali to correlate and aggregate data, enhancing security measures and facilitating thorough threat investigations. Its adaptability makes it suitable across different sectors.

Anomali

Gigamon Deep Observability Pipeline boosts network visibility and performance through features like NetFlow and deduplication, facilitating data flow insights and improved security. It supports traffic monitoring and management across various infrastructures.

Gigamon Deep Observability Pipeline enhances network management by offering features such as NetFlow, deduplication, header stripping, and packet filtering. These capabilities are instrumental in optimizing performance, offering users stability and improved encryption processes. Despite its robust hardware capabilities, it requires enhancements in security, filtering, and delivery time for hardware. Users note challenges with monitoring cloud networks and insufficient cluster capacity. There is also a call for improved interface design and internal traffic flow visualization.

What are the essential features of Gigamon Deep Observability Pipeline?

NetFlow: Provides comprehensive visibility into network traffic for informed decision-making.
Deduplication: Reduces unnecessary data replication, enhancing performance and efficiency.
Header Stripping: Streamlines data packets by removing unnecessary headers, improving speed.
Packet Filtering: Enables selective traffic analysis for targeted network insights.
Traffic Aggregation: Consolidates and transforms network data, aiding detailed packet analysis.

What benefits and ROI can be expected from Gigamon Deep Observability Pipeline?

Enhanced Security: Improves data integrity and threat detection capabilities.
Operational Efficiency: Streamlines traffic monitoring and performance processes.
Improved Data Insights: Offers comprehensive data flow analysis for better decision-making.
Hardware Stability: Provides reliable performance with robust hardware support.
Encryption Optimization: Simplifies the encryption process for secure data handling.

Gigamon Deep Observability Pipeline finds application across industries for network visibility and management. It is used extensively for traffic monitoring, SSL inspection, mobile network oversight, and data center operations. Organizations leverage its capabilities to address network issues, enhance security, and streamline performance monitoring processes. Its ability to group traffic aids significantly in problem-solving and SSL detection.

Gigamon

Sample Customers

Bank of England, First Energy, UBISOFT, Bank of Hope, Blackhawk Network

Amica Insurance, College of William & Mary, Gamma, IntercontinentalExchange, OppenheimerFunds

Buyer's Guide

Anomali vs. Gigamon Deep Observability Pipeline

April 2026

Free Report: Anomali vs. Gigamon Deep Observability Pipeline

Find out what your peers are saying about Anomali vs. Gigamon Deep Observability Pipeline and other solutions. Updated: April 2026.

DOWNLOAD NOW

893,244 professionals have used our research since 2012.

See our Anomali vs. Gigamon Deep Observability Pipeline report.

See our list of best Security Information and Event Management (SIEM) vendors and best Advanced Threat Protection (ATP) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.