Fortinet FortiSIEM and Huntress Managed SIEM compete in the threat detection and response category. Huntress seems to have the upper hand with its comprehensive feature set and proactive cybersecurity measures, appealing to users despite its higher cost.
Features: Fortinet FortiSIEM delivers robust real-time monitoring, fast incident response capabilities, and extensive network visibility. Huntress Managed SIEM stands out with advanced threat hunting, proactive cybersecurity measures, and actionable threat intelligence.
Ease of Deployment and Customer Service: Fortinet FortiSIEM's deployment can be challenging, requiring significant setup efforts and technical expertise, but its support services are responsive. Huntress Managed SIEM offers a more accessible setup and strong customer service, enhancing user experience during deployment.
Pricing and ROI: Fortinet FortiSIEM provides a competitive setup cost and notable ROI, making it appealing to cost-sensitive buyers. Huntress Managed SIEM, despite a potentially higher price, promises significant ROI through effective threat management, which users find justifies the expense.
I can expect an estimated five to twenty times return on investment with this solution.
The value is not just the time saved; it also allows the team to spend more of its capacity on higher-priority security investigations and other proactive security work.
Faster threat detection and investigation can potentially reduce the financial impact of security incidents.
Local tech support is available, however, for more critical or technical issues, we depend on the OEM directly, especially when it comes to on-prem solutions.
There is a knowledgeable, though small, team of support engineers around the world.
They take some time to respond because they need logs and investigations, which delays the response time.
You are communicating to tier one and tier two people who are then communicating on the back end, so you are not getting updates as frequently.
For a managed security platform, having responsive support is important, and our experience has been positive.
Having access to the managed SOC also gives us confidence that we have expert support available when needed.
At any point in time, when network devices increase or there is a change in the infrastructure, we can add more workers and collectors to expand our infrastructure setup.
Fortinet FortiSIEM is highly scalable.
Fortinet FortiSIEM is easy to scale.
It struggles with scalability when dealing with high logs, multi-site, multi-tenant setups, and large volumes of endpoints.
The managed approach is particularly helpful in this regard because the security team does not have to spend a lot of time maintaining the underlying SIEM infrastructure.
The centralized log collection and smart filtering also help keep data volume and alert noise manageable as workload increases.
It stabilizes itself in an appropriate time, so its uptime is good.
These issues may cause unusual errors and user interface issues.
Some stability issues occur, but Fortinet's technical support team provides assistance.
From an operational standpoint, it has been dependable enough that the team can use it as a part of our regular security monitoring without having to worry about frequent service interruptions or maintenance issues.
Huntress Managed SIEM is very stable.
Huntress Managed SIEM is stable and reliable for our day-to-day SOC operations.
Recently, they revised it to a subscription-based, all-inclusive license.
The built-in APIs in Fortinet FortiSIEM are somewhat lacking and could be improved for better integration with external ITSM products.
Fortinet FortiSIEM should broaden its remediation part to include more features for incident management.
It would be helpful to have more flexibility for creating custom detection rules, dashboards, and alert workflows based on specific organizational requirements.
It is very important for our organization that Huntress Managed SIEM offers security and compliance solutions without complexity because we do not want a product that is generally too difficult to use.
The major improvement needed for Huntress Managed SIEM is storage scaling, especially with our heavy ingest from FortiGate, plus some help managing OpenSearch memory spikes.
Setting it up for oneself as an enterprise-licensed product can be quite expensive.
Windows agent licenses cost around 3,000 Rupees per device per year.
The revised model is subscription-based and more flexible.
Huntress Managed SIEM's flat and straightforward pricing allows for better budgeting and financial planning.
I believe most competitors charge by the data slightly differently compared to how this solution does, as it is per data source rather than data size in gigabytes.
I did not have to spend more than what I initially budgeted for.
It provides extensive logging and record-keeping for internal networks, cloud applications, and services as well as perimeter physical network security.
I find the real-time monitoring and correlation capabilities effective for security alerts.
Huntress Managed SIEM combines machine detection with human investigation, which adds context and helps confirm if something is actually a threat rather than just noise.
Regarding the feature that requires no alert tuning, we are using the advanced filtering so we only see actionable events and not lots of noise, which filters out any false positives or areas of no concern.
Huntress Managed SIEM has helped in both angles, improving efficiency in SOC operations where the mean time to detect is drastically reduced.
| Product | Mindshare (%) |
|---|---|
| Huntress Managed SIEM | 1.1% |
| Fortinet FortiSIEM | 2.2% |
| Other | 96.7% |
| Company Size | Count |
|---|---|
| Small Business | 34 |
| Midsize Enterprise | 22 |
| Large Enterprise | 24 |
| Company Size | Count |
|---|---|
| Small Business | 18 |
| Midsize Enterprise | 4 |
| Large Enterprise | 7 |
Fortinet FortiSIEM offers robust features like automation, real-time monitoring, and scalable log correlation. It integrates SOC and NOC, enhancing security by seamlessly managing data. A preferred choice for threat management, its comprehensive reports and competitive pricing add value.
Fortinet FortiSIEM serves as a comprehensive platform for security monitoring, threat detection, and incident management. It streamlines operations by integrating seamlessly with Fortinet and third-party tools, offering dynamic service discovery and user-friendly analytics. Leveraging its stable infrastructure, organizations conduct log analysis and behavioral monitoring across networks and applications. It supports compliance reporting and enhances security environments through integration with firewalls and security devices. Its cloud and on-premise options cater to regulatory and operational needs, while multitenant capabilities enable managed security service providers to extend robust security services. Users have highlighted areas for improvement in API integration, data retrieval speed, resource consumption, automation, and reporting flexibility.
What are the key features of Fortinet FortiSIEM?In healthcare, Fortinet FortiSIEM ensures compliance and secure health data management. Financial institutions utilize it for real-time monitoring and fraud detection, while educational sectors deploy for network security and data integrity. Service providers leverage its multitenant features for expansive client management.
Huntress Managed SIEM delivers advanced threat detection and response capabilities tailored for Security Information and Event Management. It addresses cybersecurity challenges with automated monitoring and actionable insights.
Huntress Managed SIEM stands out by offering comprehensive security event monitoring designed for modern cybersecurity landscapes. It identifies potential threats and vulnerabilities, ensuring actionable data for quicker response. Its integration capabilities with existing security infrastructure make it a reliable choice for enhancing cyber defenses and incident resolution.
What are the key features of Huntress Managed SIEM?Huntress Managed SIEM is widely used across industries such as finance, healthcare, and retail, where it is critical to protect sensitive information. Its adaptability to different enterprise needs makes it an ideal choice for strengthening security frameworks in diverse sectors.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
