Logpoint SIEM is a security information and event management solution that centralizes log and event data collection from various sources across an organization's infrastructure. The platform normalizes collected data into a common taxonomy, making it easier for security analysts to work with logs from different systems without needing to know the exact format of each device's logs. The solution maps alerts to the MITRE ATT&CK framework to provide context for security incidents and user activity. It includes data enrichment capabilities that add contextual information such as threat intelligence, geographical data, and LDAP information to logs. Logpoint SIEM offers compliance support for regulatory frameworks including GDPR, NIS2, and GPG13 through pre-configured dashboards for access management, incident management, and perimeter security monitoring. The platform includes forensic analysis capabilities to help determine the root cause of security breaches. The solution features AgentX, a native endpoint sensor that provides visibility into user actions and processes running on endpoints to enhance threat detection capabilities. Logpoint SIEM can be integrated with other security tools within the Logpoint ecosystem, including automation, case management, and behavior analytics components. Logpoint SIEM supports various deployment options and is designed to help organizations improve their security visibility, threat detection, and compliance reporting capabilities.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Serverless, real-time data analysis framework for incident detection and response.
ELAT (Event Log Analysis Tool) is a tool that helps in analyzing Windows event logs for malware detection.
HonnyPotter is a WordPress plugin that logs all failed login attempts, with a caution to use it at your own risk.
PINNED

Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.