Anomali vs USM Anywhere comparison

Anomali and LevelBlue are both solutions in the Security Information and Event Management (SIEM) category. Anomali is ranked #56, while LevelBlue is ranked #31 with an average rating of 7.3. Anomali holds a 0.2% mindshare in SIEM, compared to LevelBlue’s 0.9% mindshare. Additionally, 66% of Anomali users are willing to recommend the solution, compared to 92% of LevelBlue users who would recommend it.

Anomali

Read 2 Anomali reviews

343 Views
233 Comparison Views

66% willing to recommend

USM Anywhere

Read 115 USM Anywhere reviews

2,186 Views
1,503 Comparison Views

92% willing to recommend

Anomali

USM Anywhere

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Apr 1, 2025

USM Anywhere and Anomali are competing products in cybersecurity threat detection and management. USM Anywhere seems to have the upper hand in pricing and support, while Anomali's advanced features offer a strong argument for its higher pricing.

Features: USM Anywhere offers asset discovery, intrusion detection, and continuous threat intelligence updates. Anomali provides extensive data collection, machine learning-based threat analysis, and strong integration capabilities.

Ease of Deployment and Customer Service: USM Anywhere offers cloud-based deployment, promoting easy scaling and integration, paired with strong customer service. Anomali offers both cloud and on-premises deployment options, providing flexibility along with responsive customer support to meet varied organizational needs.

Pricing and ROI: USM Anywhere is recognized for its competitive pricing and solid ROI due to its all-in-one approach. Anomali, while generally more expensive, provides value through comprehensive threat intelligence, justifying the expense for many organizations.

To learn more, read our detailed Security Information and Event Management (SIEM) Report (Updated: March 2025).

Buyer's Guide

Security Information and Event Management (SIEM)

March 2025

Download the complete report

Helped 845,406 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Anomali

Ranking in Security Information and Event Management (SIEM)

56th

Average Rating

7.0

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

User Entity Behavior Analytics (UEBA) (25th), Advanced Threat Protection (ATP) (31st), Threat Intelligence Platforms (9th), Extended Detection and Response (XDR) (41st)

USM Anywhere

Ranking in Security Information and Event Management (SIEM)

31st

Average Rating

8.4

Reviews Sentiment

7.0

Number of Reviews

115

Ranking in other categories

Log Management (42nd), Endpoint Detection and Response (EDR) (53rd), Compliance Management (12th)

Mindshare comparison

As of April 2025, in the Security Information and Event Management (SIEM) category, the mindshare of Anomali is 0.2%, down from 0.2% compared to the previous year. The mindshare of USM Anywhere is 0.9%, down from 2.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Featured Reviews

Peter Pamuk

Managing Member at Conterre Consulting LLC.

Easy and quick credential monitoring; tech support could be improved

Currently, we are not using any other solution for this use case, but previously we used MISP, which is an open-source project that requires a lot of effort to make work. That way, it required a lot of attention from our system administrator, and we had to sanitize the data very frequently because the peers we had. Sometimes they flooded our systems with chunk data and that needs to be handled and we decided to go with a paid solution instead.

Read full review

Kris Nawani

Co-Founder/Director at Bangkok MSP Company Limited

Offers complete coverage without the need to install additional software

USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools The solution offers complete coverage without the need to install additional software, as it is maintained by the vendor. It helps in saving…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The feature I have found most valuable is credential monitoring. This feature is easy and quick."

"I have found Cyber threat intelligence (CTI) very useful and concise. The solution is easy to use."

"It brought our logs into one place for review and set up alarms based on changes we were missing due to lack of having one place for everything to go."

"The solution is stable."

"The IDS and the threat intelligence are very useful. They are very intuitive and data-rich."

"The AlienVault solution has enabled us to create a SOC on a budget with smaller than usual staff requirements, offering a wider range of solutions for our customers."

"It provides a single pane of glass view, coupled with a whole security ecosystem. The ability to manage everything from a central point, including vulnerability assessments, asset management - including the services provided by the various hosts, NIDS, HIDS, etc. - provides a very efficient way of dealing with things."

"What I find the most valuable about USM Anywhere is its compliance. It shows a list of all the administrators logged on and does it quite well. There are no whistles and bells, it's reliable and simple to use."

"The most valuable feature is vulnerability management because it gives you insight into your environment to know what systems need to be updated or patched."

"Asset discovery seems to be good."

More USM Anywhere pros

Cons

"A lot of tools can give you many features, such as CTI intelligence and a tax service reduction. However, many people are combining different tools together to have more capabilities. It is up to the consumer whether they want to have multiple tools or have one tool that serves the purpose. Anomali Enterprise could improve by combining all the other tools' features into one solution."

"Less code in integration would be nice when building blocks."

"AlienVault must improve their correlation feature. Some of the events do not match with the correlation rules and some of the correlation events are false-positive."

"We would like more plugins. This being the main point of improvement which would benefit the users."

"It would be hard for any legitimate MSSP to use it."

"Different functions to customize reports should be added."

"Sometimes the log is unclear, and the report is a bit ambiguous."

"We've had some stability problems, not a lot, but a few. Updates seem to be the worst. That seems to be when the stability problems come up."

"The solution already has quite good tools, however, they need better integration tools for linking with Office 365, Google Suite, and so on."

"More complimentary training needs to be done for use with this tool. If you get into a bind, then it will cost you."

More USM Anywhere cons

Pricing and Cost Advice

"When comparing the price of Anomali Enterprise to other solutions it is in the medium to high range. However, I am satisfied with the price."

"It's saved security costs."

"I rate the price of AT&T AlienVault USM a four out of five."

"I don't know exactly, but I know it is based on the number of logs and the retention duration, such as 30 days or something like that. So, the smallest package is about 500 a month for 30 days of logs. There is a virtual machine. You need resources for it. It is a log collecting VM. They provide the software, and you just have to load a virtual machine. So, you're going to incur some CPU RAM and storage for wherever this log collecting appliance is running, which typically is in our cloud and on our platform for the customer."

"Do the one month trial and try to work out the kinks during it, as it has free support and service hours."

"They are a little more expensive than Microsoft."

"We pay around $12,000 a year including storage."

"Use an MSSP instead. It is much cheaper."

"So far, it has been a good solution for a tight budget."

More USM Anywhere pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

845,406 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

16%

Computer Software Company

14%

Government

10%

Manufacturing Company

Computer Software Company

20%

Financial Services Firm

Comms Service Provider

Educational Organization

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about Anomali ThreatStream?

The feature I have found most valuable is credential monitoring. This feature is easy and quick.

See all answers

What needs improvement with Anomali ThreatStream?

I think that this solution should improve its integrations. This part of the solution could be bigger and moved into the no-code direction. Less code in integration would be nice when building blocks.

See all answers

What is your primary use case for Anomali ThreatStream?

Our primary use case for this solution is as a threat intelligence platform. We stream various threat feeds into this platform. We also make correlations between the feeds to duplicate the data, ag...

See all answers

What do you like most about AT&T AlienVault USM?

The most valuable feature of the solution is the ease of deployment that it provides to users. The integrations that the product has with third-party applications are useful.

See all answers

What is your experience regarding pricing and costs for AT&T AlienVault USM?

The pricing is amazing and really cheap.

See all answers

What needs improvement with AT&T AlienVault USM?

There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks. It is also limited when used with bigger products and has complex password requirements.

See all answers

Comparisons

ThreatConnect Threat Intelligence Platform (TIP) vs Anomali

Compared 27% of the time

ThreatQ vs Anomali

Compared 20% of the time

Recorded Future vs Anomali

Compared 18% of the time

Microsoft Defender Threat Intelligence vs Anomali

Compared 7% of the time

Splunk Enterprise Security vs Anomali

Compared 6% of the time

More Anomali Competitors

AlienVault OSSIM vs USM Anywhere

Compared 30% of the time

Wazuh vs USM Anywhere

Compared 15% of the time

Splunk Enterprise Security vs USM Anywhere

Compared 14% of the time

Rapid7 InsightIDR vs USM Anywhere

Compared 12% of the time

CrowdStrike Falcon vs USM Anywhere

Compared 9% of the time

More USM Anywhere Competitors

Product Reports

Buyer's Guide

Threat Intelligence Platforms

March 2025

Download Anomali product report

Buyer's Guide

USM Anywhere

March 2025

Download USM Anywhere product report

Also Known As

Match, Lens, ThreatStream, STAXX, Anomali Security Analytics

AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity

Overview

Anomali delivers advanced threat intelligence solutions designed to enhance security operations by providing comprehensive visibility into threats and enabling real-time threat detection and management.

Anomali stands out in threat intelligence, offering an innovative platform that integrates data to identify and analyze threats effectively. It enables teams to streamline threat detection processes and respond to incidents with increased agility. With a focus on accuracy and efficiency, Anomali supports cybersecurity professionals in making informed decisions to safeguard their networks consistently.

What are Anomali's core features?

ThreatStream: A platform that aggregates threat intelligence feeds to enhance threat assessment.
Match: An automated detection feature that matches internal log data against threat intelligence insights.
Link: Provides graphical visualization for threat analysis, helping to understand threat vectors better.
STAXX: A lightweight tool for collecting and analyzing open-source threat intelligence.

What are the key benefits and ROI of using Anomali?

Improved Threat Detection: Streamlined processes lead to faster identification and response to threats.
Resource Efficiency: Automation reduces manual tasks, allowing security teams to focus on strategic activities.
Better Decision Making: Provides actionable insights that enable more informed security strategies.

In industries like finance and healthcare, Anomali is implemented to address specific challenges like compliance and data protection. By using this platform, organizations gain the ability to adapt to evolving threats, ensuring robust and adaptable security postures tailored to industry demands.

Anomali

USM Anywhere centralizes security monitoring of networks and devices in the cloud, on premises, and in remote locations, helping you to detect threats virtually anywhere.

Discover

Network asset discovery
Software & services discovery
AWS asset discovery
Azure asset discovery
Google Cloud Platform asset discovery

Analyze

SIEM event correlation, auto-prioritized alarms
User activity monitoring
Up to 90-days of online, searchable events

Detect

Cloud intrusion detection (AWS, Azure, GCP)
Network intrusion detection (NIDS)
Host intrusion detection (HIDS)
Endpoint Detection and Response (EDR)

Respond

Forensics querying
Automate & orchestrate response
Notifications and ticketing

Assess

Vulnerability scanning
Cloud infrastructure assessment
User & asset configuration
Dark web monitoring

Report

Pre-built compliance reporting templates
Pre-built event reporting templates
Customizable views and dashboards
Log storage

LevelBlue

Sample Customers

Bank of England, First Energy, UBISOFT, Bank of Hope, Blackhawk Network

Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom

Buyer's Guide

Security Information and Event Management (SIEM)

March 2025

Download Free Report

Find out what your peers are saying about Splunk, Wazuh, Microsoft and others in Security Information and Event Management (SIEM). Updated: March 2025.

DOWNLOAD NOW

845,406 professionals have used our research since 2012.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.