No more typing reviews! Try our Samantha, our new voice AI agent.

OpenText Enterprise Security Manager vs Seceon Open Threat Management Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

OpenText Enterprise Securit...
Ranking in Security Information and Event Management (SIEM)
25th
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
98
Ranking in other categories
No ranking in other categories
Seceon Open Threat Manageme...
Ranking in Security Information and Event Management (SIEM)
49th
Average Rating
7.8
Reviews Sentiment
7.5
Number of Reviews
13
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2026, in the Security Information and Event Management (SIEM) category, the mindshare of OpenText Enterprise Security Manager is 1.5%, up from 1.1% compared to the previous year. The mindshare of Seceon Open Threat Management Platform is 0.8%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
OpenText Enterprise Security Manager1.5%
Seceon Open Threat Management Platform0.8%
Other97.7%
Security Information and Event Management (SIEM)
 

Featured Reviews

DayaramGoyal - PeerSpot reviewer
Vice President, Technology at Cache Digitech Pvt Ltd.
Integration shines but threat detection and technical support need attention
Regarding threat detection capabilities, I think OpenText Enterprise Security Manager covers the MITRE ATT&CK framework at an average level, and on a scale of one to ten, I would rate it only five. They have to improve in those areas in terms of threat detection capabilities. For ArcSight, they need to give the complete package, with UBA being part of that. They have added it, but I question what capabilities are there, especially on the SOAR side where they have to improve because the SIEM was very strong. For the SOAR side, because SIEM was very strong when they were earlier launched, but for SOAR, they were integrating with third-party solutions initially, and then they built the capability. They have acquired some company, but it is not up to that potential. They slowly and gradually lost that ground to Splunk, QRadar, and other companies, so when anybody talks about the full capabilities, they are not thinking about Micro Focus as of now. I would desire additional features in OpenText Enterprise Security Manager, especially on the SOAR side, and maybe on the UBA side, as threats intel and all, which are part of bundled solutions. Those are the areas they have to improve so that customers can trust and enhance those things, and maybe the customers will feel they should go for this product. As of now, if we are evaluating our own scenario, we are not even thinking about it. Earlier, that was not the scenario when they were selling this SIEM solution in the market; everybody was thinking OpenText was the default option, but now, if you're looking for a complete solution stack, nobody is even considering it.
Vaibhav Patkar - PeerSpot reviewer
CISO at Orient Technologies Pvt. Ltd.
Offers remediation capabilities and provides a bird's-eye view of events happening in your environment, summarizing critical events that need attention
One drawback is that it becomes so easy to use that users may lose the habit of manual checks and balances. As a security person, you should always worry about potential threats. If you have a very useful and easy tool, you might lose the ability to think differently and critically. For example, in a group of ten people, if nine think the same way and one thinks differently, you should consider the tenth person's perspective because they might have valuable insights. Having a great product is not always beneficial because you may become too dependent on it, which can be problematic in the long term. If you lose your critical thinking skills, you might not recognize when something abnormal is happening. While the system will notice, systems can have their own challenges and issues. I'm not criticizing the product itself but emphasizing the importance of not being overly dependent on machines. Similar to what we see with Tesla cars, no matter how advanced, there is always a chance things may not work as expected. So, the users need to prepare for that eventuality. Seceon Open Threat Management Platform has some add-ons that they sell as part of the whole suite, but not individually. If they sold them individually, they could potentially get more business.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"ArcSight is better than them all when it comes to filtering, normalization, aggregation, dashboards, reporting and correlation, multi-tenancy and custom devices support."
"The filters and the ability to do what you want are the most valuable features; there is nothing that you cannot do in this solution, and it has all the features, which makes it very dynamic."
"The solution has gone beyond signature-based monitoring and analysis and is AI-powered. It is good enough to cover the full range of cybersecurity services."
"The feature that I have found the most useful is that it can be deployed to the cloud."
"The filters and the ability to do what you want are the most valuable features. There is nothing that you cannot do in this solution. It has all the features, which makes it very dynamic."
"ArcSight technical support is enthusiastic, and they have a lot of experience and many case studies."
"The reports that we are from getting from ArcSight are very valuable. The reporting in ArcSight is good. Our regulators ask us for the reports on a regular basis, and we have been able to provide the required data. Its overall functionality in terms of log analysis and the speed at which it does that is also valuable. It is very quick. Whatever alerts we had configured were extremely fast. We immediately get alerts when there is unauthorized access or unknown access, or even positive access. This is where we found the difference between ArcSight and other solutions."
"The reports that we are from getting from ArcSight are very valuable, the reporting in ArcSight is good, our regulators ask us for the reports on a regular basis, and we have been able to provide the required data."
"The solution is stable."
"The pricing of Seceon Open Threat Management Platform is very reasonable."
"The solution is very cost-effective compared to Splunk and LogRhythm."
"If we compare the solution with other SIEM solutions that are also turning to artificial intelligence, this will be the number one choice."
"I like that it's an AI-based platform. The most valuable feature is that it's a comprehensive solution. Most tools in the marketplace are comprised of miscellaneous items. They fail to provide real-time remediation features. However, with Seceon Open Threat Management Platform, anything you can think of in cybersecurity, like auto-remediation, real-time response, and even on-premise components, is available in a single platform. So, it's perfect for finance and healthcare who don't want to share their data with a third party like the cloud. You can have this on-premise as well. So, the expenditure will be lower as less human intervention is required."
"The main thing is the value proposition. It is one of the most sophisticated yet affordable solutions that I've come across. It is also one of the easiest-to-manage yet comprehensive solutions for a SOC analyst. Its customizations are really good, and it has a lot of integrations. It is multi-tenant and very fast to onboard. Its stability is 100%. We've never had an outage with it. It doesn't require extensive hardware resources. Its level of support is also very good. They have a very responsive technical team."
"The algorithm used in Seceon OTM is clear and logical, categorizing events as needed. This helps us identify and respond to threats effectively."
"The most valuable feature of this solution is its artificial intelligence."
 

Cons

"What could be improved in ArcSight Enterprise Security Manager (ESM) is its analytics feature."
"The initial setup could be more straightforward."
"​In certain cases, this product does have false positives, which the company should work on."
"ArcSight ESM could improve by adding more features and documentation. There needs to be more documentation."
"The analytics feature is not reliable and needs improvement for more detailed analysis."
"The web console should have all the features of the standard console."
"When we need to consume old events, we have to wait for a long time. ArcSight should improve the database capability to reply to queries faster. It would also be interesting if they implemented network visibility. For example, they could add a feature like NetWitness with a model just for looking through the packets."
"Customer service during the transition from HPE to Micro Focus was abysmal where it became disruptive to our service delivery."
"It would be better if they offered global coverage."
"We are at the client’s end, offering services. They don’t know about security rules and benchmarks. We are working on the discovery and remediation but we don’t really have the intelligence that was available while working with other tools. Human working is also very essential for the solution. The automatic session is impossible to play since it needs to touch Redfin for further analysis. No one has breached our clients."
"It would be ideal with the processing was more manageable. Not many customers are willing to have a dedicated server with two CPUs and one TB of memory. The cost of this is huge for a smaller organization."
"The product could be improved by including sandboxing capabilities in the next release."
"For future releases, integrating incident response tools and improving communication on incident reporting could be beneficial."
"The SOP they provided wasn't great. They offered training over Sherp Virtualization, and the Seceon leadership visited our location to explain everything in detail, but the documentation and training could be better. It isn't as effective as it could be. There's some room for improvement there."
"The management console could use some enhancements."
"It needs more compatibility for co-managed solutions."
 

Pricing and Cost Advice

"The product licenses are inexpensive."
"ArcSight can be a little bit expensive because of the area that we work in and the cost. Licensing is mostly on a yearly basis, not monthly."
"It's a good price, it's one of the cheaper solutions."
"The cost of the solution is not very high, although hiring a qualified analyst to work with the product is expensive."
"Thanks to Micro Focus's licensing model, as an MSSP, we are able to see a complete return on our investment almost immediately."
"The licensing cost is affordable if you get an enterprise license. The licensing is based on EPS, so you can probably provide a package of license for multiple ESMs with their correlational end fees. It is cost-effective."
"​It is best to be an institutional buyer and directly contact the sales team, as they can provide over-the-top discounts for bulk orders.​"
"We're paying a fee for an MSSP, and the cost of the total cost of ArcSight ESM was approximately three to four million dollars a year. The price was less than similar solutions. We did not have additional fees."
"I find Seceon OTM's pricing to be reasonable, not too high or low, just okay for the market standards. I can't disclose specific figures, we pay on a quarterly basis under a service model. I would rate it eight out of ten. As a customer, I always hope for better pricing options."
"The pricing is very competitive. It's not expensive."
"The price is quite reasonable."
"It has a per-asset model instead of an ingestion-based model, which gives predictable pricing. In terms of price, it is in the middle to lower range of SIEMs that it competes against. It is the most affordable solution that we have implemented so far. It was much more affordable than anything else I've implemented."
"We used the solution's trial version for two months and later purchased it."
"Seceon Open Threat Management Platform is cost-effective because it's a comprehensive platform that offers high availability."
"The solution is cheap and very competitive. It offers good tuning in terms of the pricing. Other solutions like Palo Alto and IBM are more expensive."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
893,244 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Jun 28, 2015
Qradar vs. ArcSight
Continuing with the SIEM posts we have done at Infosecnirvana, this post is a Head to head comparison of the two Industry leading SIEM products in the market – HP ArcSight and IBM QRadar Both the products have consistently been in the Gartner Leaders Quadrant. Both HP and IBM took over niche SIEM…
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Marketing Services Firm
10%
Manufacturing Company
8%
Comms Service Provider
8%
Manufacturing Company
11%
Computer Software Company
10%
Financial Services Firm
9%
Outsourcing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business37
Midsize Enterprise14
Large Enterprise57
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise5
Large Enterprise1
 

Questions from the Community

Which is the best SIEM tool for a mid-sized financial services firm: Arcsight or Securonix?
In my market, a lot of financial companies had or have an ArcSight installation. Just because in former times it was pretty good. Now a lot of them are looking for a more effective solution due to ...
What is your experience regarding pricing and costs for ArcSight Enterprise Security Manager (ESM)?
ArcSight Enterprise Security Manager (ESM) is very cheap compared to other tools. It is worth the investment if you are considering the cost.
What needs improvement with ArcSight Enterprise Security Manager (ESM)?
Regarding threat detection capabilities, I think OpenText Enterprise Security Manager covers the MITRE ATT&CK framework at an average level, and on a scale of one to ten, I would rate it only f...
What is your experience regarding pricing and costs for Seceon Open Threat Management Platform?
The pricing of Seceon Open Threat Management Platform is very reasonable.
What needs improvement with Seceon Open Threat Management Platform?
There are areas for improvement in the customization options. Every ( /products/every-reviews ) quarter, they are developing the platform with new updates based on feedback provided.
What is your primary use case for Seceon Open Threat Management Platform?
We are a Managed Security Service Provider (MSSP ( /categories/managed-security-services-providers-mssp )), and we provide services to our customers.
 

Also Known As

Micro Focus ArcSight, HPE ArcSight, ArcSight
Seceon OTM, Seceon aiSIEM, aiSIEM, Seceon Open Threat Management
 

Overview

 

Sample Customers

Lake Health, U.S. Department of Health and Human Services, Bank AlJazira, Banca Intesa, and Obrela.
Caduceus, SUNY
Find out what your peers are saying about OpenText Enterprise Security Manager vs. Seceon Open Threat Management Platform and other solutions. Updated: April 2026.
893,244 professionals have used our research since 2012.