The Tactics of SIEM Providers - ffs is there anyone you can trust?
It’s the wild west out there. The tactics of SIEM providers can it times be underhand and in other complete bullsh*t. This article breaks down what may be happening to you and just as a kicker … how we can help.
1) Charge For Events Per Second (EPS)
This pushes costs up as you collect more data, encouraging you to restrict security information to keep costs under control.
2) Charge You For Data Volume
Some SIEM vendors charge for volume licences. Not only do they charge EPS but they charge for the storage and support of that data. It’s worth noting, licensing fees increase along with the increased storage, despite the license remaining the same…
Complex GUI and Expensive Training
Ever wondered why commercial SIEM products look vastly different from one another and are normally quite tricky to navigate? This is so you send people on training run by the provider. Which you have to pay for. Our GUI is open source and simple!
4) Providers Tie You In With Long Contracts
Some companies find that long contracts suit their needs.
POCKETSIEM HAS A ROLLING MONTHY CONTRACT
5) Exorbitant Licensing Fees
Not only is the licensing model (ESP/Data Volume) sh*t, the actual costs of the software/hardware is often eye wateringly high.
6) “Plug-and-play”
Some systems are operational and serving the intended purpose as soon as they are plugged in. Most, however, require an investment of time, skill, experience, and training in order to write alerts and use cases from scratch, and manage results.
PocketSIEM is built with up to date rulesets and use-cases, from day one!
7) Fear Selling
Despite what they tell you, most organisations do not need highly bespoke, nation state proof, zero day findings, next level advanced thingies.
Has a vendor ever implied that … “You’ll only be secure if you buy our thingie-majigarybob”?
Obviously we have a reason for writing such an article. The tactics of SIEM providers can be misleading and they may be taking the p*ss. Get in touch with th4ts3cur1ty.company and strike up a conversation about how we differ from our competition.
