Exabeam and ThreatConnect Threat Intelligence Platform (TIP) are leading cybersecurity solutions excelling in advanced threat analysis and intelligence integration, respectively, each bringing unique advantages depending on organizational needs. Exabeam stands out with its advanced threat analysis and behavioral monitoring, while ThreatConnect is strong in threat intelligence and community sharing.
Features: Exabeam provides advanced analytics and behavior detection, automated incident response, and emphasizes internal threat management. ThreatConnect offers a robust threat intelligence database, seamless integration with external tools, and collaborative intelligence sharing, focusing on varied threat data analysis.
Room for Improvement: Exabeam could enhance its application logging capabilities and make its interface more accessible for new users. Better information integration outside AWS environments and expanded security features are also potential improvement areas. ThreatConnect might benefit from simplified user interfaces, additional real-time customization options, and focusing on standalone TIP enhancements for broader use.
Ease of Deployment and Customer Service: Exabeam facilitates a streamlined deployment process with proactive customer support, ideal for rapid integration needs. Conversely, ThreatConnect offers flexible deployment options and strong community support, fitting organizations seeking adaptive threat solutions.
Pricing and ROI: Exabeam offers competitive pricing aligned with its extensive feature set, delivering considerable ROI through effective monitoring and threat detection. ThreatConnect TIP provides scalable pricing, advantageous for those prioritizing threat intelligence sophistication, with cost-effectiveness deriving from its integrated intelligence network.
Since we started working with Torq, I am handling much fewer alerts. It is becoming really easy for me to handle an alert.
By the time we officially bought Torq, we already had two workflows that were very helpful to us.
It pretty much took until we got to our first renewal where we said that this is the value we see, this is the things we want more, but that is the first place where we said we are happy enough that we want to renew.
Exabeam offers more machine learning models that detect anomalies.
We have reduced manual analyst effort by thirty to forty percent.
This trust has led to an increase in sales because customers are confident we can protect their data.
The speed and quality of their answers have been pretty good, as I usually get a response within 24 hours, and they follow up well.
We can always get an answer, and the support team are experts in their own system.
Nine out of ten times, they give me a solution even if it is not the solution I wanted, and I still can get to the result.
Even with TAM support from Exabeam, many issues go unresolved.
I also had the chance to look at the documentation, and the documentation is good.
They have been responsive, knowledgeable, and helpful.
I just like their customer support because, within a short period of contacting them, they are able to help navigate issues.
Our case management is super scalable.
In terms of scalability, you can do as long as you can build it, and they can support it.
Regarding the ability of the solution to grow in your work environment, if it is scalable, if it fits your business requirements, and if there is room to scale up, the answer is yes, for sure.
Regarding Exabeam's scalability and how well it adapts to its customers' needs, I would rate it an eight.
ThreatConnect supports scalability by allowing us to identify threats and share information within our team networks.
Most of the time, the system is stable as long as the components that they integrate with are stable.
Regarding stability, I have noticed some lagging, crashing, and downtime, which is one of my largest gripes.
I would rate Torq's product stability at eight, acknowledging that there are bugs, glitches, and downtimes.
These problems were not frequent, and the last six to eight months have been stable.
Overall, I think Exabeam's stability level is good.
Sometimes, when using the solution, it slows down, affecting our ability to mitigate threats.
It was able to capture data but was unable to differentiate between the agent hostname we are using and the hostname that resides on the back end of the Internet.
From an engineering perspective, I think more error messages and error handling information for our engineering team would be very helpful.
If a step is failing, the system could try to autocorrect it with AI or open a ticket from the workflow itself.
Exabeam needs to improve its documentation and provide more customization for dashboards and case management.
I have explored the SaaS version; it offers many new features.
Exabeam's integration capabilities are not good, as Exabeam has a very limited number of integrations and no out-of-box integration.
The pricing is high for smaller organizations, so it would be beneficial to have tiered pricing.
ThreatConnect Threat Intelligence Platform (TIP) could be improved by simplifying the user interface to better fit day-to-day analyst workflow.
When they bring more and more value into the platform, it makes more sense to pay that price, but still, it is expensive.
Before deciding to implement Torq, I considered that compared to our old case management platform, Torq was a much better price and had a lot better value for what you get out of the platform, which was a key consideration for the company.
It is an expensive solution, not an inexpensive solution, but we get through the flexibility.
The pricing seems a bit high for smaller companies.
Generally, the pricing and setup cost are on the higher side.
Torq's unified platform approach to AI SOC automation and case management has significantly benefited us by integrating the case management platform with the automation, which saves time compared to managing multiple point solutions across our security stack.
The fact that I can build whatever I want within my own imagination and skills without relying on code is the best thing about Torq.
You can copy and paste a cURL command. If you have documentation or APIs, you usually have an example on the side. You basically have all the information on how the API call should be. You can just copy that and paste it into a step, and it will just build the step for you.
Exabeam's AI capabilities, like the natural language mode, convert natural language into Exabeam queries, enhancing ease of use.
The product offers useful features like the dashboard, timeline, and session views, which enhance our security tools.
Exabeam's UEBA is the most valuable feature that I have found so far.
The features are simple to use, and the interface is user-friendly, making it easy to navigate and apply the solutions.
The API-first architecture that enables us to perform custom integration with other products and real-time distribution.


| Company Size | Count |
|---|---|
| Midsize Enterprise | 3 |
| Large Enterprise | 4 |
| Company Size | Count |
|---|---|
| Small Business | 12 |
| Midsize Enterprise | 4 |
| Large Enterprise | 7 |
| Company Size | Count |
|---|---|
| Small Business | 8 |
| Midsize Enterprise | 23 |
| Large Enterprise | 4 |
Torq is the enterprise AI SOC solution that effectively combines adaptive insights and automation to handle critical threats efficiently. It manages threat lifecycles, swiftly moving from triage to response, ensuring effective risk management.
Torq is designed to streamline security operations by aggregating telemetry across your security stack. It investigates significant risks and manages threats from triage to containment and remediation. This AI-driven tool enhances the capabilities of your SecOps team, allowing them to achieve more impactful results without introducing complicated processes.
What are the key features of Torq?In industries like finance and healthcare, Torq shows effectiveness by adapting to specific risk scenarios often encountered in these fields. Its integration with existing infrastructures makes it a valuable asset for maintaining stringent security standards, essential for protecting critical data and operations in diverse high-stakes environments.
Exabeam Fusion is a cloud-delivered solution that that enables you to:
-Leverage turnkey threat detection, investigation, and response
-Collect, search and enhance data from anywhere
-Detect threats missed by other tools, using market-leading behavior analytics
-Achieve successful SecOps outcomes with prescriptive, threat-centric use case packages
-Enhance productivity and reduce response times with automation
-Meet regulatory compliance and audit requirements with ease
ThreatConnect Threat Intelligence Platform provides a comprehensive solution for operational threat intelligence. It effectively ingests and enriches data, aligning with intelligence requirements for seamless application across security operations.
ThreatConnect TIP stands out by integrating threat intelligence with orchestration for streamlined threat management. It simplifies the user experience with a customizable interface assisting security teams in operationalizing insights across multiple teams without disruption. The platform automates threat scoring and optimizes threat correlation and response, ensuring timely threat detection and protection. Collaboration with Polarity and Risk Quantifier accelerates actionable intelligence, while support and patch management enhance overall user experience. Although improvements in integration processes and training accessibility are necessary, the platform aggregates threat data for efficient threat mitigation.
What are the key features of ThreatConnect TIP?In industries focusing on security, ThreatConnect TIP supports teams in identifying and mitigating security threats through automation. Integrated with cybersecurity networks, it assists in endpoint protection, SOC management, and vulnerability management, being pivotal in threat investigation and intelligence dissemination.
We monitor all Threat Intelligence Platforms (TIP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.