Securonix Cloud SIEM and UEBA

Securonix is a privately held security analytics vendor headquartered in Addison, Texas, founded in 2008 and bringing its first product to market in 2011. It has grown to 350+ employees across North America, EMEA, and APJ, supported by a large partner network and an emphasis on a broad integration ecosystem. The company positions its platform against the rising sophistication of cyberattacks and the shortage of skilled defenders, arguing for next-generation security analytics that correlate events in real time, detect anomalies, reduce false positives, enrich alerts with context and risk scores, and improve workflow automation and reporting to shorten investigation and mitigation cycles.

Its next-generation foundation is the SNYPR Security Analytics Platform (introduced in 2017), built on Apache Hadoop and Kafka to overcome long-term storage limitations and unify log management, SIEM, and UEBA. Since an earlier review, Securonix has expanded global reach via a technical partnership program and a significantly larger MSSP network, with over a third of new customers coming from outside the US. It also entered SaaS with Securonix Cloud SIEM and UEBA, later expanded in Version 6.2 (August 2018) into a full-featured cloud SIEM while adding platform improvements.

Key 6.2 additions include ResponseBot, a supervised machine-learning recommendation engine that learns from past incidents and senior analysts’ decisions to help Tier 1 analysts quickly disposition alerts or open tickets, potentially cutting escalations by 10x or more. SNYPREye adds centralized monitoring and operational management across complex Hadoop-based deployments, crucial for large enterprises and multi-tenant MSSPs. Additional enhancements include upgraded analyst dashboards and a configurable Privacy Workflow for GDPR-aligned access approvals. The platform’s value is reinforced by deep, bidirectional partner integrations via the Fusion Partner network, including ServiceNow and Cylance.

• Securonix is headquartered in Addison, Texas, USA.
• The company was founded in 2008 and brought its first product to market in 2011.
• Securonix has over 350 employees across North America, EMEA, and APJ.
• The SNYPR platform was introduced in early 2017 and uses Apache Hadoop and Kafka in its backend.
• Securonix Cloud SIEM and UEBA launched in July 2017.
• Version 6.2 was introduced in August 2018.
• The cloud platform is multi-tenant, fully managed, and includes strict tenant isolation, encryption, granular access control, and full audit trail.
• The cloud offering is SOC 2 Type 2 certified.
• The platform provides over 350 out-of-the-box connectors and includes predefined threat models.
• The Fusion Partner network includes over 30 security vendors.

• “The product removed the long-term storage limitations of their previous generation platform and provides customers with an end-to-end solution for log management, security information and event management (SIEM) and user and entity behavior analytics (UEBA) in a single platform.”
• “Securonix Cloud platform is a multi-tenant cloud solution that is fully managed by the company, which ensures its continuous availability, security updates, and feature enhancements.”
• “Priced by the number of monitored identities, Securonix Cloud platform avoids the unpredictability of solutions that charge by the amount of collected security data.”
• “Another major new function announced in the latest platform release… is Securonix ResponseBot – an intelligent recommendation engine that helps SOC analysts and incident responders make adequate remediation decisions.”
• “Powered by supervised machine learning, ResponseBot engine analyzes all past security incidents and attempts to ‘figure out’ the logic behind the decisions that senior security experts made.”
• “Still, even in its simplest implementation, the ResponseBot can substantially improve productivity and reduce the number of incident escalations by 10 times or more.”
• “SNYPREye was created to simplify daily maintenance of a Securonix deployment by collecting real-time information about its various components… and presenting them in a rich graphical interface with forensic capabilities.”
• “To address the new privacy regulations like GDPR, the solution now implements a new universal Privacy Workflow – a configurable approval process that’s triggered automatically whenever access to sensitive personal information is requested.”
• “It is important to understand that no standalone security intelligence solution will be able to address all its current and future cybersecurity challenges.”
• “We expect full-featured bidirectional integrations that are tested, certified and supported by both partners.”