Magic Quadrant for Security Information and Event Management

Supporting early targeted attack detection and response

Published October 2019

d

Security and risk management leaders increasingly seek SIEM solutions with capabilities that support early targeted attack detection and response. Users must balance advanced SIEM capabilities with the resources needed to run and tune the solution.

Gartner defines the security and information event management (SIEM) market by the customer’s need to analyze event data in real time for early detection of targeted attacks and data breaches, and to collect, store, investigate and report on log data for incident response, forensics and regulatory compliance. The vendors included in this Magic Quadrant analysis have products designed for this purpose, and they actively market and sell these technologies to the security buying center.