No more typing reviews! Try our Samantha, our new voice AI agent.

LevelBlue USM Anywhere vs Mezmo comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 24, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

LevelBlue USM Anywhere
Ranking in Log Management
27th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
115
Ranking in other categories
Security Information and Event Management (SIEM) (26th), Endpoint Detection and Response (EDR) (33rd), Compliance Management (12th)
Mezmo
Ranking in Log Management
54th
Average Rating
9.0
Number of Reviews
2
Ranking in other categories
Application Performance Monitoring (APM) and Observability (78th), Observability Pipeline Software (8th)
 

Mindshare comparison

As of November 2026, in the Log Management category, the mindshare of LevelBlue USM Anywhere is 1.6%, up from 0.5% compared to the previous year. The mindshare of Mezmo is 0.9%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Mindshare Distribution
ProductMindshare (%)
LevelBlue USM Anywhere1.6%
Mezmo0.9%
Other97.5%
Log Management
 

Featured Reviews

Kris Nawani - PeerSpot reviewer
Co-Founder/Director at Bangkok MSP Company Limited
Offers complete coverage without the need to install additional software
USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools The solution offers complete coverage without the need to install additional software, as it is maintained by the vendor. It helps in saving…
TO
President and Founder at STILLWATER SUPERCOMPUTING INC
It consolidates all logs into one place and provides required features and functionalities
Every once in a while, our IBM cloud operational implementation gets behind. Sometimes, when we have a customer event, we do not get access to the latest logs for about 30 minutes, particularly for the sites that are heavily utilized. This is clearly not good. It is impossible to do RCA when you can't look at the logs that pertain to the time period in which the event occurred. It could be more of an operational problem than a feature problem. I don't have visibility about whether it is a LogDNA issue or just an operational issue.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It allows for a lot of out-of-the-box features: vuln scanning, HIDS/HIPS, and IDS."
"The most useful feature is the customization for alarms, alerts, and reports."
"The pricing and licensing are at its best in the market when compared with other vendor's SIEM products."
"This solution can completely detect and prevent incidents on your network."
"Customer Service: The service was excellent and always showing excellent treatment and availability. Technical Support: The service is excellent the support requested really is quick and very efficient"
"Overall, I find that this product is amazing."
"The asset management functionality (active and passive scans) is also really important. You can't protect what you do not know about, so having an inventory of all your devices and software is critical to a security management program."
"The solution also provides basic log storage options for periods of 15, 30, and 90 days."
"With LogDNA, which brings all the logs together in an interleaved stream, it allows us to take a transaction and relate it to other contextual events making the gathering of evidence for auditors and our internal RCA much more productive."
"The solution aggregates all event streams, so that if there are any issues, it's all in the same interface."
"We haven't had anything yet that we couldn't do through LogDNA."
"LogDNA consolidates all logs into one place, which is super valuable."
 

Cons

"The reporting is mediocre and is something that needs to be improved."
"The vulnerability reporting needs to have options to be able to sort or customize the output."
"they seem to have bugs from time to time that go unfixed for a while and that is frustrating. I'm not saying the product needs to be bug-free, but they need to be responsive to bugs."
"There are many reports included but would be nice to have better access to the data."
"The way it identifies systems can use some improvement. It has a hard time differentiating between versions of Windows."
"This solution could be easier to use. It is hard for some people to understand, and they need to get training and certification just to understand what it's showing them."
"I'd like to see a dashboard that's a little more descriptive."
"Search performance can be slow. The Raw Logs feature is painfully slow."
"No ability to encapsulate a query or a filter, and communicate or share that among the team."
"Every once in a while, our IBM cloud operational implementation gets behind. Sometimes, when we have a customer event, we do not get access to the latest logs for about 30 minutes, particularly for the sites that are heavily utilized. This is clearly not good. It is impossible to RCA when you can't look at the logs that pertain to the time period in which the event occurred. It could be more of an operational problem than a feature problem. I don't have visibility about whether it is a LogDNA issue or just an operational issue."
"Scalability could be improved; we are using it through the IBM cloud deployment and on some of the data centers that are very heavily used, there is a significant lag in the event stream, sometimes 10, 15 minutes behind, which makes the RCA impossible."
 

Pricing and Cost Advice

"AlienVault is flexible on their pricing for unlimited licenses."
"The ROI is quite good."
"It's saved security costs."
"Pricing is very competitive with other products and you get much more functionality from AlienVault."
"Its price is in the medium to upper range."
"The price of this solution is reasonable, which is one of the reasons why we selected it over other solutions."
"Use the AlienVault team. They are helpful and the documentation that they provide is second to none."
"So far, I feel the product's pricing is a good value. The technology is decent. You get what you pay for. I think it's fair."
Information not available
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
16%
Construction Company
16%
Comms Service Provider
9%
Manufacturing Company
9%
Comms Service Provider
18%
Transportation Company
14%
Construction Company
14%
Financial Services Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business65
Midsize Enterprise29
Large Enterprise25
No data available
 

Questions from the Community

What needs improvement with AT&T AlienVault USM?
There are scalability issues due to a 60 TB limit, which restricts its use for large customers like banks. It is also limited when used with bigger products and has complex password requirements.
What is your primary use case for AT&T AlienVault USM?
USM Anywhere is used for threat detection and investigation. It provides a solution with built-in threat intelligence and various other investigation tools.
Ask a question
Earn 20 points
 

Also Known As

AT&T AlienVault USM, AlienVault, AlienVault USM, Alienvault Cybersecurity
LogDNA
 

Overview

 

Sample Customers

Abel & Cole, Bank of Ireland, Bluegrass Cellular, CareerBuilder, Claire's, Hays Medical Center, Hope International, McCurrach, McKinsey & Company, Party Delights, Pepco Holdings, Richland School District, Ricoh, SaveMart, Shake Shack, Steelcase, TaxAct, Taylor Morrison, Vonage and Zoom
Instacart, Asics, Lime, Salesforce
Find out what your peers are saying about LevelBlue USM Anywhere vs. Mezmo and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.