Lumu vs Vectra AI comparison

Read 45 Vectra AI reviews

4,864 Views
2,530 Comparison Views

97% willing to recommend

Lumu

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Vectra AI and Lumu are competitors in the cybersecurity sector. Lumu has the upper hand with superior features and dynamic threat management despite higher costs.

Features: Vectra AI offers advanced threat detection, robust network monitoring, and comprehensive data analytics. Lumu delivers fast threat identification, actionable intelligence, and real-time threat intelligence.

Room for Improvement: Vectra AI needs better real-time alerting algorithms, streamlined integration processes, and more intuitive configuration settings. Lumu could enhance data consolidation, expand compliance reporting capabilities, and improve data correlation features.

Ease of Deployment and Customer Service: Vectra AI provides easy deployment with comprehensive customer support aiding integration. Lumu allows quick deployment but has mixed customer service feedback, offering flexible deployment models.

Pricing and ROI: Vectra AI is seen as having favorable pricing with positive ROI perceptions. Lumu, despite a higher initial setup cost, is valued for its features and intelligence, providing satisfactory ROI due to its effective threat management.

To learn more, read our detailed Lumu vs. Vectra AI Report (Updated: April 2025).

Download the complete report

Lumu vs. Vectra AI

April 2025

Helped 851,604 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Lumu

Ranking in Intrusion Detection and Prevention Software (IDPS)

10th

Ranking in Network Detection and Response (NDR)

7th

Ranking in Extended Detection and Response (XDR)

16th

Average Rating

9.4

Reviews Sentiment

7.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Vectra AI

Ranking in Intrusion Detection and Prevention Software (IDPS)

3rd

Ranking in Network Detection and Response (NDR)

2nd

Ranking in Extended Detection and Response (XDR)

14th

Average Rating

8.6

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Identity Threat Detection and Response (ITDR) (10th), AI-Powered Cybersecurity Platforms (6th)

Mindshare comparison

As of May 2025, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of Lumu is 3.9%, up from 0.8% compared to the previous year. The mindshare of Vectra AI is 11.3%, up from 11.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Intrusion Detection and Prevention Software (IDPS)

Featured Reviews

Juan Solano

IT Director at Atlantic Quantum Innovations

Protects against threats and handles it in time with moderate pricing

Mostly, Lumu is an automatic tool. We'll deploy on firewalls and DNS servers. Lumu detects every attack on our network. The other day, we had CLC, the command controller, and the tool reacted automatically. It detected the attack and immediately blocked it without intervention from my team. The improvement is in the security process, as it's now entirely automated. We no longer require a technician or engineer to monitor our network 24/7. Lumu updates with AI and global threat intelligence, which greatly assists us. Since our workload is lighter, Lumu handles all of our tasks. We're using FortiGate for the firewall and Kaspersky for endpoints. If you are going to Lumu, you need another solution for the endpoint. You need to integrate with other tools like firewalls or another antivirus. I recommend the solution based on the price, usability, and service offered by the solution. Overall, I rate the solution a nine out of ten.

Read full review

Mohammad Alkurdi

Owner at Fortibits

Innovative detection features enhance monitoring

The advantages of the integration are not entirely out-of-the-box. You have to do it manually. When I'm doing tier response, an out-of-the-box solution is not available. You need to have a Linux server, and from the Linux server, you must perform AI tasks, and there is a lot to be handled in the back end. This is a major consideration about them. The recall feature, if it can be placed in some areas instead of the cloud, and charged for, would be better. Recall the storage where you watch all the traffic, and you can recall it and try to analyze it in the back end. It’s cloud-based. If they offer it on-prem, it would be better. I think they have a solution, but I have never tested it, to be honest with you.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I like Lumu's simple user interface. When we deployed it, we got full access, allowing us to identify IP addresses on the network and connect machine names to users. It helped us identify and block threats via the firewall. I also appreciate the chat support and ticket closure process. We're currently reviewing network detection solutions, and my recommendations include Lumu, Sentinel, and a few others. Regarding functionality and user-friendliness, I would recommend Lumu over the others."

"It's been helpful for overall extended network visibility."

"The context provided by the tool is very complete, it includes the miter matrix, playbooks, links, hashes, and much more."

"You can access external links, playbooks, MITRE Matrix, and a lot of information."

"The tool's support team helps partners resolve any problems with the product."

"Lumu protects against threats immediately and handles them in time."

"Most of it is automated, so I do not have to watch it to get alerts."

"It's important for us that the user interface is easy to understand and that is the biggest benefit we see from Vectra AI."

"The solution's ability to reduce alerts, by rolling up numerous alerts to create a single incident or campaign, helps in that it collapses all the events to a particular host, or a particular detection to a set of hosts. So it doesn't generate too many alerts. By and large, whatever alerts it generates are actionable, and actionable within the day."

"Vectra AI can bring the ability to detect intrusion on the network more so than legacy IDS tools."

"The fact that we get the visualization of what's happening on our network, which is a way of improving our security in-depth is most valuable."

"Vectra AI helped our team be more productive and save time. We have less work thanks to it."

"It gives you access, with Recall, to instant visibility into your network through something like a SIEM solution. For us, being able to correlate all of this network data without having to manage it, has provided immediate value. It gives us the ability to really work on the stuff where I and my team have expertise, instead of having to manage a SIEM solution..."

"The automatic filtering that they provide is valuable. The logic inside that makes some detections instead of us is very useful. We are confident that if we are just looking into it and there is nothing, nothing could happen."

"The most useful feature is the anomaly detection because it's not signature-based. It picks up the initial part of any attack, like the recon and those aspects of the kill chain, very well."

More Vectra AI pros

Cons

"The integration with different vendors and endpoints could be improved."

"I am happy with the current features. However, one important one is to improve the reports."

"The free version is minimal compared to the full version."

"It would be good if we could access the physical logs."

"Lumu's ability to discover threats is an area of concern where improvements are needed."

"The reports need improvement."

"Nothing so far needs to be improved."

"Multiple appliances are required for Vectra AI, making it less convenient compared to competitors."

"They use a proprietary logging format that is probably 90% similar to Bro Logs. Their biggest area of improvement is finishing out the remaining 10%. That 10% might not be beneficial to their ML engine, but that's fine. The industry standard is Zeek Logs or Bro Logs, or Bro or Zeek, depending on how old you are. While they have 90% of those fields, they're still missing some fields. In very rare instances, some community rules do not have the fields that they need, and we had to modify community rules for our logs. So, their biggest area of improvement would be to just finish their matching of the Zeek standard."

"A blind spot that I have is around the ease with which you can automate threat intervention."

"Integration with other security components needs improvement. It should have true integration as opposed to just being a separate pane of glass."

"In education as a sector, we are looking at AI a lot in terms of how it can be used as part of the teaching and learning side of things. It would be great to have Vectra AI look at a better way to enhance the security posture related to the AI tools in our portfolio."

"We are using SMB 3.0, which is an encrypted protocol. When we get some alerts or something, we cannot go deep into the protocol to see what's wrong because it's encrypted. We need to decrypt the protocol in another way, which is quite difficult. We might go back to SMB 2.0 just for this reason, but that's not a good solution."

"The solution's marketing is not good."

"If you hit a certain number of rules, triage filters, or groups, the UX responds more slowly. However, we have a complex network and a lot of rules. So, our setup might not be a typical implementation example. We even had UX engineers onsite, and they looked at issues, improvements, and user feedback. Since then, it has gotten a lot better, they even built in features that we specifically requested for our company."

More Vectra AI cons

Pricing and Cost Advice

"It is the cheapest solution we found."

"Compared to Lumu, other solutions are more expensive. SentinelOne was a bit cheaper, and another provider's price structure is unclear, but Lumu fit our budget nicely. SentinelOne's cost depends on the number of devices, and it might be similar to Lumu's, depending on deployment."

"The tool is available at a good price. The tool offers a good and competitive price for customers."

"The solution is low-cost and affordable."

"My company pays for the Vectra AI licensing fee yearly. I know the figure because my company recently renewed the license, and it's okay, at least for the financial sector."

"From a pricing perspective, they are very commercially competitive. From a licensing perspective, just be conscious that some of their future cloud solutions come with additional subscriptions. Also, if you're outside of the US, you will get charged freight for the device back to your country."

"It is an expensive solution, but it's not the most expensive we've seen. We also know how much we're going to pay, unlike with some other providers where all of a sudden our license explodes."

"Vectra's licensing model could scale to our research network, which has multiple, 100-gigabit links."

"Cost is a big factor, as always. However, I think we have a very good price–performance ratio."

"Its cost is too much. It's an investment that we can afford. It's a lot, but it's worth it."

"Their licensing model is antiquated. I'm not a fan of their licensing model. We have to pay for licensing based on four different things. You have to pay based on the number of unique IPs, the number of logs that we send through Recall and Stream, and the size of our environment. They need to simplify their licensing down to just one thing. It should be based on the amount of data, the number of devices, or something else, but there should be just one thing for everything. That's what they need to base their licensing on. Cost-wise, they're not cheap. They were definitely the most expensive option, but you get what you pay for. They're not the cheapest option."

More Vectra AI pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.

See recommendations

851,604 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

13%

Computer Software Company

Insurance Company

Government

Financial Services Firm

14%

Computer Software Company

13%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Lumu?

Lumu protects against threats immediately and handles them in time.

What needs improvement with Lumu?

Lumu's ability to discover threats is an area of concern where improvements are needed.

What is your primary use case for Lumu?

My company is currently dealing with Lumu's onboarding process. Lumu is used to monitor the environment permanently and validate if there is ransomware that can exploit our infrastructure.

What is the biggest difference between Corelight and Vectra AI?

The two platforms take a fundamentally different approach to NDR. Corelight is limited to use cases that require the eventual forwarding of events and parsed data logs to a security team’s SIEM or ...

What do you like most about Vectra AI?

The solution is currently used as a central threat detection and response system.

What is your experience regarding pricing and costs for Vectra AI?

It is very acceptable when you compare it with Darktrace, for example.

Stellar Cyber Open XDR vs Lumu

Comparisons

Darktrace vs Lumu

Compared 59% of the time

Compared 10% of the time

Wazuh vs Lumu

Compared 9% of the time

Fortinet FortiGate IPS vs Lumu

Compared 5% of the time

ExtraHop Reveal(x) vs Lumu

Compared 4% of the time

More Lumu Competitors

Darktrace vs Vectra AI

Compared 31% of the time

ExtraHop Reveal(x) vs Vectra AI

Compared 10% of the time

Corelight vs Vectra AI

Compared 7% of the time

Cisco Secure Network Analytics vs Vectra AI

Compared 6% of the time

Palo Alto Networks Advanced Threat Prevention vs Vectra AI

Compared 2% of the time

More Vectra AI Competitors

Product Reports

Network Detection and Response (NDR)

May 2025

Download Lumu product report

Download Vectra AI product report

April 2025

Also Known As

No data available

Vectra Networks, Vectra AI NDR

Overview

Lumu Technologies is a cyber-security company that illuminates threats, attacks, and adversaries affecting enterprises worldwide. Using actionable intelligence, Lumu provides a radical way to secure networks by enhancing and augmenting existing defense capabilities established over the past 25 years.

Lumu Technologies

Vectra AI is used for detecting network anomalies and potential malicious activities, providing visibility into network traffic and enhancing threat detection across environments.

Organizations deploy Vectra AI mainly on-premises with additional cloud components. It helps with compliance, incident response, security monitoring, detecting insider threats, and correlating network events. Vectra AI captures and enriches network metadata, provides detailed dashboards, reduces false positives, and supports cross-environment behavioral analysis to enhance threat detection and prioritization. While valued for its high accuracy and alert aggregation, it has room for improvement in UI/UX, packet management, and integration with SIEMs and other tools. It is noted for expensive pricing and limited proactive threat response features.

What are Vectra AI's most valuable features?

High accuracy in identifying threat locations
Aggregation of alerts into single incidents
24/7 threat detection
Visibility into the entire attack lifecycle
Risk score aggregation
Effective triaging of alerts
Integration with other tools

What benefits or ROI should users look for?

Enhanced threat detection and prioritization
Comprehensive network visibility
Reduction in false positives
Better incident response capabilities
Improved compliance monitoring

In specific industries, Vectra AI is deployed to monitor complex networks and alleviate challenges in threat detection. It is particularly effective in sectors requiring stringent compliance and security measures, offering insights and capabilities crucial for protecting sensitive data and maintaining operational integrity.

Sample Customers

Information Not Available

Tribune Media Group, Barry University, Aruba Networks, Good Technology, Riverbed, Santa Clara University, Securities Exchange, Tri-State Generation and Transmission Association