SIEM vendors in the United States

Elastic provides the Elasticsearch Platform, which includes search, observability, and security solutions.

IBM is a technology company that sells software, infrastructure, and consulting services.

Abstract provides a composable SIEM platform for security operations.

Artemis Security provides an AI-native security operations platform that detects, investigates and responds to cyber attacks.

Blumira provides a security operations platform for IT teams to detect and respond to threats.

Cylake provides an AI-native cybersecurity platform for air-gapped sovereign environments.

Exabeam provides security operations platforms that use behavioural analytics to detect and respond to threats.

Securonix provides a cloud-native platform for security operations, combining SIEM, UEBA, SOAR and threat intelligence.

Splunk provides a data platform for security, observability, and AI.

Stellar Cyber provides an AI-native security operations platform that unifies detection and response tools.

Sumo Logic provides cloud log management, monitoring, and SIEM tools for security and operations teams.

Wazuh provides an open source platform for security monitoring and threat detection.

Microsoft sells software, cloud services, hardware, and gaming products.

Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats.

Fortinet provides cybersecurity solutions and services, including networking and security convergence, for enterprises and governments.

CrowdStrike provides AI-native cybersecurity solutions to stop breaches.

Rapid7 provides AI-powered managed cybersecurity operations, including MDR, SIEM, and vulnerability management.

World-renowned cybersecurity firm now part of Google Cloud, delivering threat intelligence-led penetration testing and red teaming informed by front-line incident response experience.

7AI provides AI agents that automate security operations centre tasks for enterprises.

Anomali provides a threat intelligence platform and security analytics, built around its ThreatStream intelligence management product.

Binary Defense provides managed detection and response services and an AI-powered security platform.

Cribl provides a vendor-agnostic platform for managing, investigating, and analyzing telemetry data.

Telemetry pipelines that route, enrich and transform security and observability data to SIEMs and other destinations, plus AI agents for site reliability work.

Exaforce provides an agentic AI platform for security operations, detection, triage, investigation and response.

Foresite provides managed detection and response services using agentic AI for security operations.

Huntress provides managed cybersecurity services including endpoint detection, identity threat detection, and security awareness training.

Intezer provides an AI-powered security operations center that investigates all alerts at forensic depth.

Mezmo sells an open-source agent harness called AURA, which runs in a customer's own environment using their tools, telemetry and operational context.

NetWitness provides cybersecurity platforms for threat detection, investigation and response across IT and OT environments.

Swimlane provides agentic AI automation for security operations, vulnerability management, and compliance.

OpenTelemetry pipeline that collects, reduces, masks and routes logs and other telemetry to SIEM, storage and observability tools.