The Monster Named Platformization

When I started specializing in SIEM systems as a consultant less than ten years ago, there were a few authoritative SIEM products on the market, operated on their own servers by the large organizations that used them:

• Splunk Enterprise (or Enterprise Security)
• ArcSight
• IBM QRadar

Other solutions existed, among others, Elastic’s full-fledged SIEM solution (as an add-on module on the Elastic or ELK stack) was emerging at that time.

Since then, an astonishing amount has happened in this market. In my perception, the three most important products are now the following: