Try our new research platform with insights from 80,000+ expert users

Anvilogic vs Sumo Logic Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.1
Anvilogic enhanced efficiency, reduced costs, improved threat management, and integrated acquisitions swiftly without increasing overall operational expenses.
Sentiment score
5.8
Sumo Logic Security enhances efficiency by reducing downtime and workload, leading to overall satisfaction among users despite varied investment evaluations.
We're taking these things that executives see on the news, cyber threats falling from the sky, and we're taking the timeline that would take weeks or sometimes even months to address, depending on what's required for the detection, and bringing that timeline down to hours and days.
Director, Cybersecurity Operations at Labcorp
We rolled out approximately 1,500 Armory alerts in three months, which would not have been possible with Splunk.
Vice President, Information & Cyber Security at St. George's University
If we were not doing more and did not have Anvilogic, we would need one dedicated person to do this detection engineering.
Head of Information Security at a tech vendor with 1,001-5,000 employees
We have saved 64 hours of our time overall.
Security Engineer at a tech vendor with 11-50 employees
The return on investment I have seen with Sumo Logic Security in the past year and a half is tough to quantify, but I would estimate it has hit the milestones we set internally for return on investment.
CISO at Mambu
 

Customer Service

Sentiment score
6.8
Anvilogic's support is effective with quick responses, though some users note delays and lack of a clear tracking system.
Sentiment score
7.0
Sumo Logic Security is praised for efficient customer service and effective technical support, though regional response times may vary.
The product management and the product engineering team are available to us if we need to review something with them.
Director, Cybersecurity at a financial services firm with 10,001+ employees
One of the best things about Anvilogic is the partnership, their knowledge, the depth of technical understanding, and the speed at which they respond.
Head of Information Security at a tech vendor with 1,001-5,000 employees
I would evaluate their customer service and tech support as fantastic.
Senior Director | Detection Response at a tech vendor with 1,001-5,000 employees
They have a response time of forty-eight hours, which is not instant support.
SOC Analyst at a computer software company with 1,001-5,000 employees
In general, they usually provide continuous support post-implementation, being in touch and trying to help, which makes their after-sale process better than Splunk.
CSO at Altera
Sumo Logic Security has really good customer support.
CISO at Mambu
 

Scalability Issues

Sentiment score
6.7
Anvilogic is scalable and adaptable, seamlessly integrating with systems, but needs enhanced detection capabilities for comprehensive threat management.
Sentiment score
7.6
Sumo Logic Security is adaptable, scales with business growth, excels in cloud environments, and consistently receives high flexibility ratings.
We started with about 55 detections and scaled up to about 980 odd detections so far.
Head of Information Security at a tech vendor with 1,001-5,000 employees
Anvilogic scales effectively with the growing needs of my organization.
Senior Director | Detection Response at a tech vendor with 1,001-5,000 employees
Anvilogic is helping us identify what the needs of the business are, where in many cases, business processes just run off on their own.
Director, Cybersecurity Operations at Labcorp
Sumo Logic Security scales up automatically because it is a cloud-native SIEM, and I do not need to worry about hardware clusters or capacity planning.
Security Engineer at a tech vendor with 11-50 employees
The tool has high scalability because everything is based in the cloud.
Deputy Country Manager at PT Securite Asia Indonesia (ABP Securite)
I did not face any significant issues with Sumo Logic Security, but the pricing may be a concern as they try to upsell and raise the prices very quickly.
CSO at Altera
 

Stability Issues

Sentiment score
6.5
Anvilogic is stable with rare issues, proactive communication, and fast support, though AI agent stability varies.
Sentiment score
8.0
Sumo Logic Security is highly reliable, efficiently handling large data with minimal performance issues and rare support needs.
I have never experienced a serious outage.
Vice President, Information & Cyber Security at St. George's University
I would assess the stability and reliability of Anvilogic as very good.
Senior Director | Detection Response at a tech vendor with 1,001-5,000 employees
The biggest instability has been with the AI agent, which the team is not using fully due to inconsistent results.
Senior Manager, Threat Prevention Engineering at a tech vendor with 5,001-10,000 employees
If there are many records, the system may stop or the UI may become unresponsive.
SOC Analyst at a computer software company with 1,001-5,000 employees
The query language is pretty straightforward and easy, and it is very powerful for building different searches and dashboards that will serve for later exploration of the same interests I have.
CSO at Altera
It operates very well as a cloud-native SaaS platform with high availability, and there is no downtime that I have experienced.
Security Engineer at a tech vendor with 11-50 employees
 

Room For Improvement

Anvilogic needs improvements in integration inputs, documentation, detection logic, customization, support, management features, and third-party integration costs.
Users urge improvements in interface usability, automation, integration, support, AI capabilities, pricing, and visualization for Sumo Logic Security.
Flexibility is key for any enterprise platform to meet our unique business requirements.
Senior Manager, Threat Prevention Engineering at a tech vendor with 5,001-10,000 employees
It lacked a robust CI/CD pipeline, which is crucial for comprehensive testing before changes go into production.
Threat Researcher 2 at a tech vendor with 1,001-5,000 employees
It seems that it requires more growth in how you can navigate through it and see the overall maturity of it clearly for a specific actor versus the enterprise-wide visibility of the whole maturity of the program.
Manager, Threat Intel & Detection Operations at Zendesk
This can lead to alerts that are collections of disjointed signals that sometimes make no sense and lack real context; this simplistic approach makes it hard to find coherent stories during investigations.
CSO at Altera
I would also appreciate the AWS automation integrations to be more secure because currently, they are using access keys, which involves a user rather than roles, which is the security best practice recommended by AWS.
Senior Security Analyst at City Electric Supply Company
The correlation rules and log mapping are not as mature compared to other SIM tools like Splunk.
SOC Analyst at a computer software company with 1,001-5,000 employees
 

Setup Cost

Anvilogic offers competitive pricing with strong support, though its costs may challenge smaller organizations despite a straightforward setup.
Sumo Logic Security offers mid-range pricing, balancing cost and functionality, with convenience through AWS Marketplace but increasing costs with usage.
Because they do not completely replace a SIEM, their pricing is slowly edging towards being a little too much for a smaller organization like ours.
Head of Information Security at a tech vendor with 1,001-5,000 employees
Licensing is reasonably affordable and should be evaluated over time concerning the platform's value.
Senior Manager, Threat Prevention Engineering at a tech vendor with 5,001-10,000 employees
They provide estimates because obviously every business is different, but they provided reasonable estimates that were fairly accurate based on other customers from a similar type of background or size.
Manager, Threat Intel & Detection Operations at Zendesk
This makes it more cost-effective because other solutions often include a third element in their pricing.
Deputy Country Manager at PT Securite Asia Indonesia (ABP Securite)
From one to ten, where one is cheap and ten is expensive, I would put Sumo Logic Security at a seven.
CISO at Mambu
If you go to the well-known vendors such as Azure Sentinel or other tools like Splunk, you are going to find them costly since they are well-known and they have much more integration compared to Sumo Logic Security.
Security Analyst at a tech vendor with 10,001+ employees
 

Valuable Features

Anvilogic offers platform-independent AI-driven security with no-code tools, MITRE integration, efficient cost management, and beginner-friendly usability.
Sumo Logic Security offers comprehensive log aggregation, AI analytics, and scalability, enhancing detection, response, and operational efficiency.
Detection insights help us easily identify the most noisy ones, the effective ones, and what needs to be fixed to move the noisy ones to effective ones.
Head of Information Security at a tech vendor with 1,001-5,000 employees
The learning curve is not steep, allowing even those with basic knowledge in writing detection rules to adapt quickly.
Threat Researcher 2 at a tech vendor with 1,001-5,000 employees
Anvilogic plus Snowflake has vastly improved our total cost of ownership for the SIM platform; we went from a pretty expensive platform in Splunk that was not vertically scalable due to budget limitations to a platform now that is far more efficient per terabyte of data ingested and processed per day.
Senior Manager, Threat Prevention Engineering at a tech vendor with 5,001-10,000 employees
The features I find most useful in Sumo Logic Security are the ease of implementation and connectors; they have a very easy connection and many connectors to important systems, making it very easy to implement and fast to start running in production.
CSO at Altera
They are able to save time on fewer alerts because we are able to perform tuning on the logs to be able to only get relevant or security relevant incidents.
Senior Security Analyst at City Electric Supply Company
My SOC analysts were crushed under Splunk, but Sumo has actually eased the workload and made it tolerable for three people.
CISO at Mambu
 

Categories and Ranking

Anvilogic
Ranking in Security Information and Event Management (SIEM)
10th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
11
Ranking in other categories
AI-SOC (1st)
Sumo Logic Security
Ranking in Security Information and Event Management (SIEM)
18th
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
25
Ranking in other categories
Log Management (21st), Security Orchestration Automation and Response (SOAR) (13th)
 

Mindshare comparison

As of March 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Anvilogic is 0.4%, up from 0.3% compared to the previous year. The mindshare of Sumo Logic Security is 1.7%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Anvilogic0.4%
Sumo Logic Security1.7%
Other97.9%
Security Information and Event Management (SIEM)
 

Featured Reviews

reviewer2800338 - PeerSpot reviewer
Senior Manager, Threat Prevention Engineering at a tech vendor with 5,001-10,000 employees
Modern threat detection has improved coverage and reduced costs but still needs better UX and flexibility
There is room for growth in the product platform; our detection engineers using Anvilogic every day encounter some frustrating UX experience issues where buttons are not logically placed, and workflows are not working as expected. There is also room for growth in integrating the platform with third parties, as we have encountered limitations in what can be executed via API and what is documented. We are a heavy automation integration team, so having this well documented is important for us. The enterprise capabilities within the platform also seem somewhat limited, as we run into limitations in managing detections at scale and making changes to those detections at scale. Especially at an enterprise level, if we need to add enrichment logic to every single detection deployed, it can be quite onerous; we had to develop custom scripts to manage that. Thus, enhancing enterprise-type features for managing the platform at scale rather than clicking through the GUI is important as we continue to grow. Additionally, the AI capabilities have been somewhat unstable and unintuitive to use, which is key for increasing adoption. One other thing is that the detection logic builder today is somewhat limited in flexibility regarding implementing detections, grouping detections together, and handling alerts when they fire. This might be partly due to our need to adjust to a different platform, but flexibility is key for any enterprise platform to meet our unique business requirements. Having the capability to build custom detection logic not tied to a specific structure would be helpful; although a lot can be done, it often requires working with our account team which is time-consuming and less intuitive.
MR
Senior Security Analyst at City Electric Supply Company
Security insights have enabled faster incident response and streamlined cross-team collaboration
To improve Sumo Logic Security, I would appreciate the tool being easier to use from a search perspective. For example, we have a few teams that want to use the tool itself, but they are not as savvy when it comes to creating searches from the core platform. I understand that Mobot has come out and is in the works, and it really does assist non-savvy users when it comes to querying the platform. As far as that is concerned, I wish that could be improved a bit more, but I do know that that is in the works. I would add that I wish for improved documentation. For example, we are using Sumo Playbooks and automation integrations along with that, but I have found that there has been a lack of documentation, very little to none at all when it comes to that. With regards to automation integrations as well, there are very few details included in them. I would also appreciate the AWS automation integrations to be more secure because currently, they are using access keys, which involves a user rather than roles, which is the security best practice recommended by AWS. I chose eight out of ten because to make it a nine or ten, I would lean heavily on the documentation. A lot of the times when we get around to configuring things such as playbooks or trying to understand playbooks, what I found was that documentation sometimes is not up to date or documentation is lacking. There are instances also where some security best practices are not being followed. So, if we are able to set up an integration that is not only secure, following security best practices, and has complete documentation, I believe it would alleviate the issue of having to go back and forth with support to check the documentation and things of that nature. My impression of the built-in threat intelligence feature in Sumo Logic Security is that it is comprehensive, but I would say that it could do a little bit better. For example, we have the TAXI feeds, which is STIX and TAXI integrated into the core platform, but the issue I am running into is that I am able to use that feed into a CSE alert; however, I am not able to see the contents of that feed. If I integrate CISA, which we do have integrated, I cannot see what IOCs are in that feed in the core platform, and I hope that is the case because, in order for us to better tune our alerts, we need to be able to see what is in the contents of that threat intelligence feed.
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
10%
Manufacturing Company
10%
Healthcare Company
9%
Manufacturing Company
12%
Computer Software Company
8%
Financial Services Firm
8%
Outsourcing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Large Enterprise12
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise14
 

Questions from the Community

What is your experience regarding pricing and costs for Anvilogic?
My experience with pricing, setup cost, and licensing was straightforward. They provide estimates because obviously every business is different, but they provided reasonable estimates that were fai...
What needs improvement with Anvilogic?
Currently, there is a limitation of 100 inputs in Anvilogic integrations, which is less than our needs, making it a challenge to fit all our inputs. Additionally, I believe the documentation should...
What is your primary use case for Anvilogic?
Anvilogic serves as our main SIEM and detection engineering platform. We use Anvilogic to create alerts based on our data, and the AI capability to detect alerts based on whatever data we are feedi...
What do you like most about Sumo Logic Security?
Sumo Logic Security is a good solution for searching the logs and identifying the issues.
What is your experience regarding pricing and costs for Sumo Logic Security?
I would say that the pricing for Sumo Logic Security is in the medium part of the market. If you go to the well-known vendors such as Azure Sentinel or other tools like Splunk, you are going to fin...
What needs improvement with Sumo Logic Security?
I would say there are a few more things that Sumo Logic Security can improve on. It is not the tool; it is a technical part. From the app point of view, I would say when we need to include a few la...
 

Overview

Find out what your peers are saying about Anvilogic vs. Sumo Logic Security and other solutions. Updated: March 2026.
884,873 professionals have used our research since 2012.