Try our new research platform with insights from 80,000+ expert users

Anvilogic vs OpenText Enterprise Security Manager comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 28, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.1
Anvilogic enhanced efficiency, reduced costs, improved threat management, and integrated acquisitions swiftly without increasing overall operational expenses.
Sentiment score
4.9
ROI from OpenText Enterprise Security Manager varies widely, influenced by threat detection, compliance benefits, and prevention of incidents.
We're taking these things that executives see on the news, cyber threats falling from the sky, and we're taking the timeline that would take weeks or sometimes even months to address, depending on what's required for the detection, and bringing that timeline down to hours and days.
Director, Cybersecurity Operations at Labcorp
We rolled out approximately 1,500 Armory alerts in three months, which would not have been possible with Splunk.
Vice President, Information & Cyber Security at St. George's University
If we were not doing more and did not have Anvilogic, we would need one dedicated person to do this detection engineering.
Head of Information Security at a tech vendor with 1,001-5,000 employees
 

Customer Service

Sentiment score
6.8
Anvilogic's support is effective with quick responses, though some users note delays and lack of a clear tracking system.
Sentiment score
5.4
OpenText Enterprise Security Manager support receives mixed reviews, with common complaints about slow resolution and inadequate expertise in complex issues.
The product management and the product engineering team are available to us if we need to review something with them.
Director, Cybersecurity at a financial services firm with 10,001+ employees
One of the best things about Anvilogic is the partnership, their knowledge, the depth of technical understanding, and the speed at which they respond.
Head of Information Security at a tech vendor with 1,001-5,000 employees
I would evaluate their customer service and tech support as fantastic.
Senior Director | Detection Response at a tech vendor with 1,001-5,000 employees
If I raise a P1 or P0 ticket, the response time is often delayed by four to eight hours.
Senior Security Engineer at Valuepoint Systems
 

Scalability Issues

Sentiment score
6.7
Anvilogic is scalable and adaptable, seamlessly integrating with systems, but needs enhanced detection capabilities for comprehensive threat management.
Sentiment score
5.9
OpenText Enterprise Security Manager is scalable for large deployments but faces cost challenges at the logger level.
We started with about 55 detections and scaled up to about 980 odd detections so far.
Head of Information Security at a tech vendor with 1,001-5,000 employees
Anvilogic scales effectively with the growing needs of my organization.
Senior Director | Detection Response at a tech vendor with 1,001-5,000 employees
Anvilogic is helping us identify what the needs of the business are, where in many cases, business processes just run off on their own.
Director, Cybersecurity Operations at Labcorp
It lacks some capabilities compared to other tools available in the market.
Senior Security Engineer at Valuepoint Systems
 

Stability Issues

Sentiment score
6.5
Anvilogic is stable with rare issues, proactive communication, and fast support, though AI agent stability varies.
Sentiment score
5.1
OpenText Enterprise Security Manager is stable and reliable, though performance varies with challenges in virtualization and specific components.
I have never experienced a serious outage.
Vice President, Information & Cyber Security at St. George's University
I would assess the stability and reliability of Anvilogic as very good.
Senior Director | Detection Response at a tech vendor with 1,001-5,000 employees
The biggest instability has been with the AI agent, which the team is not using fully due to inconsistent results.
Senior Manager, Threat Prevention Engineering at a tech vendor with 5,001-10,000 employees
The stability of ArcSight Enterprise Security Manager (ESM) is not very robust.
Senior Security Engineer at Valuepoint Systems
 

Room For Improvement

Anvilogic needs improvements in integration inputs, documentation, detection logic, customization, support, management features, and third-party integration costs.
OpenText Enterprise Security Manager needs user interface upgrades, better integration, improved documentation, and enhancements in analytics and scalability.
Flexibility is key for any enterprise platform to meet our unique business requirements.
Senior Manager, Threat Prevention Engineering at a tech vendor with 5,001-10,000 employees
It lacked a robust CI/CD pipeline, which is crucial for comprehensive testing before changes go into production.
Threat Researcher 2 at a tech vendor with 1,001-5,000 employees
It seems that it requires more growth in how you can navigate through it and see the overall maturity of it clearly for a specific actor versus the enterprise-wide visibility of the whole maturity of the program.
Manager, Threat Intel & Detection Operations at Zendesk
The integration aspect of ArcSight Enterprise Security Manager (ESM) needs improvement.
Senior Security Engineer at Valuepoint Systems
 

Setup Cost

Anvilogic offers competitive pricing with strong support, though its costs may challenge smaller organizations despite a straightforward setup.
OpenText Enterprise Security Manager is costly but offers robust features and scalability, with possible discounts and cost management strategies.
Because they do not completely replace a SIEM, their pricing is slowly edging towards being a little too much for a smaller organization like ours.
Head of Information Security at a tech vendor with 1,001-5,000 employees
Licensing is reasonably affordable and should be evaluated over time concerning the platform's value.
Senior Manager, Threat Prevention Engineering at a tech vendor with 5,001-10,000 employees
They provide estimates because obviously every business is different, but they provided reasonable estimates that were fairly accurate based on other customers from a similar type of background or size.
Manager, Threat Intel & Detection Operations at Zendesk
ArcSight Enterprise Security Manager (ESM) is very cheap compared to other tools.
Senior Security Engineer at Valuepoint Systems
 

Valuable Features

Anvilogic offers platform-independent AI-driven security with no-code tools, MITRE integration, efficient cost management, and beginner-friendly usability.
ArcSight offers advanced threat detection, robust integration, customizable dashboards, and automates event correlation for efficient security operations.
Detection insights help us easily identify the most noisy ones, the effective ones, and what needs to be fixed to move the noisy ones to effective ones.
Head of Information Security at a tech vendor with 1,001-5,000 employees
The learning curve is not steep, allowing even those with basic knowledge in writing detection rules to adapt quickly.
Threat Researcher 2 at a tech vendor with 1,001-5,000 employees
Anvilogic plus Snowflake has vastly improved our total cost of ownership for the SIM platform; we went from a pretty expensive platform in Splunk that was not vertically scalable due to budget limitations to a platform now that is far more efficient per terabyte of data ingested and processed per day.
Senior Manager, Threat Prevention Engineering at a tech vendor with 5,001-10,000 employees
The ability to interpret data is highly valued.
Senior Security Engineer at Valuepoint Systems
 

Categories and Ranking

Anvilogic
Ranking in Security Information and Event Management (SIEM)
10th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
11
Ranking in other categories
AI-SOC (1st)
OpenText Enterprise Securit...
Ranking in Security Information and Event Management (SIEM)
26th
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
98
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Anvilogic is 0.4%, up from 0.3% compared to the previous year. The mindshare of OpenText Enterprise Security Manager is 1.5%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Anvilogic0.4%
OpenText Enterprise Security Manager1.5%
Other98.1%
Security Information and Event Management (SIEM)
 

Featured Reviews

reviewer2800338 - PeerSpot reviewer
Senior Manager, Threat Prevention Engineering at a tech vendor with 5,001-10,000 employees
Modern threat detection has improved coverage and reduced costs but still needs better UX and flexibility
There is room for growth in the product platform; our detection engineers using Anvilogic every day encounter some frustrating UX experience issues where buttons are not logically placed, and workflows are not working as expected. There is also room for growth in integrating the platform with third parties, as we have encountered limitations in what can be executed via API and what is documented. We are a heavy automation integration team, so having this well documented is important for us. The enterprise capabilities within the platform also seem somewhat limited, as we run into limitations in managing detections at scale and making changes to those detections at scale. Especially at an enterprise level, if we need to add enrichment logic to every single detection deployed, it can be quite onerous; we had to develop custom scripts to manage that. Thus, enhancing enterprise-type features for managing the platform at scale rather than clicking through the GUI is important as we continue to grow. Additionally, the AI capabilities have been somewhat unstable and unintuitive to use, which is key for increasing adoption. One other thing is that the detection logic builder today is somewhat limited in flexibility regarding implementing detections, grouping detections together, and handling alerts when they fire. This might be partly due to our need to adjust to a different platform, but flexibility is key for any enterprise platform to meet our unique business requirements. Having the capability to build custom detection logic not tied to a specific structure would be helpful; although a lot can be done, it often requires working with our account team which is time-consuming and less intuitive.
DayaramGoyal - PeerSpot reviewer
Vice President, Technology at Cache Digitech Pvt Ltd.
Integration shines but threat detection and technical support need attention
Regarding threat detection capabilities, I think OpenText Enterprise Security Manager covers the MITRE ATT&CK framework at an average level, and on a scale of one to ten, I would rate it only five. They have to improve in those areas in terms of threat detection capabilities. For ArcSight, they need to give the complete package, with UBA being part of that. They have added it, but I question what capabilities are there, especially on the SOAR side where they have to improve because the SIEM was very strong. For the SOAR side, because SIEM was very strong when they were earlier launched, but for SOAR, they were integrating with third-party solutions initially, and then they built the capability. They have acquired some company, but it is not up to that potential. They slowly and gradually lost that ground to Splunk, QRadar, and other companies, so when anybody talks about the full capabilities, they are not thinking about Micro Focus as of now. I would desire additional features in OpenText Enterprise Security Manager, especially on the SOAR side, and maybe on the UBA side, as threats intel and all, which are part of bundled solutions. Those are the areas they have to improve so that customers can trust and enhance those things, and maybe the customers will feel they should go for this product. As of now, if we are evaluating our own scenario, we are not even thinking about it. Earlier, that was not the scenario when they were selling this SIEM solution in the market; everybody was thinking OpenText was the default option, but now, if you're looking for a complete solution stack, nobody is even considering it.
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Jun 28, 2015
Qradar vs. ArcSight
Continuing with the SIEM posts we have done at Infosecnirvana, this post is a Head to head comparison of the two Industry leading SIEM products in the market – HP ArcSight and IBM QRadar Both the products have consistently been in the Gartner Leaders Quadrant. Both HP and IBM took over niche SIEM…
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
10%
Computer Software Company
10%
Healthcare Company
9%
Marketing Services Firm
12%
Manufacturing Company
9%
Financial Services Firm
8%
Performing Arts
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Large Enterprise12
By reviewers
Company SizeCount
Small Business37
Midsize Enterprise14
Large Enterprise57
 

Questions from the Community

What is your experience regarding pricing and costs for Anvilogic?
My experience with pricing, setup cost, and licensing was straightforward. They provide estimates because obviously every business is different, but they provided reasonable estimates that were fai...
What needs improvement with Anvilogic?
Currently, there is a limitation of 100 inputs in Anvilogic integrations, which is less than our needs, making it a challenge to fit all our inputs. Additionally, I believe the documentation should...
What is your primary use case for Anvilogic?
Anvilogic serves as our main SIEM and detection engineering platform. We use Anvilogic to create alerts based on our data, and the AI capability to detect alerts based on whatever data we are feedi...
Which is the best SIEM tool for a mid-sized financial services firm: Arcsight or Securonix?
In my market, a lot of financial companies had or have an ArcSight installation. Just because in former times it was pretty good. Now a lot of them are looking for a more effective solution due to ...
What do you like most about ArcSight Enterprise Security Manager (ESM)?
We utilize ArcSight ESM for real-time threat detection in our organization. We have custom rules that we've developed on top of the WAN services, along with scheduled licensing activities.
What is your experience regarding pricing and costs for ArcSight Enterprise Security Manager (ESM)?
ArcSight Enterprise Security Manager (ESM) is very cheap compared to other tools. It is worth the investment if you are considering the cost.
 

Also Known As

No data available
Micro Focus ArcSight, HPE ArcSight, ArcSight
 

Overview

 

Sample Customers

Information Not Available
Lake Health, U.S. Department of Health and Human Services, Bank AlJazira, Banca Intesa, and Obrela.
Find out what your peers are saying about Anvilogic vs. OpenText Enterprise Security Manager and other solutions. Updated: March 2026.
884,873 professionals have used our research since 2012.