Gurucul Disrupts Next-Gen SIEM Market with Unparalleled Observability, Data Searchability and Identity-Based Threat Detection and Response

Enhancements to award-winning platform solves critical security issues while enabling reliability at scale, reduced TCO and fast time to value

Gurucul, the leader in Next-Gen SIEM, announced that it is extending the capabilities of its award-winning Security Analytics and Operations Platform to help organizations cost-effectively secure their increasingly complex cloud architectures, reach deeper insights faster, and enrich enterprise-wide visibility. The latest innovations provide industry “firsts” like 500 days of searchable data, robust purpose-built security use cases, coverage for identity-based threat detection and response (ITDR), and unified observability for any cloud environment.

AiThority Interview Insights: AiThority Interview with Vova Kyrychenko, CTO at Xenoss

“Security teams are hampered in their ability to stop sophisticated attacks because of platform unreliability, long MTTD & MTTR times, and a lack of coverage across hybrid environments”

“Security teams are hampered in their ability to stop sophisticated attacks because of platform unreliability, long MTTD & MTTR times, and a lack of coverage across hybrid environments,” said Saryu Nayyar, CEO of Gurucul. “Gurucul continues to innovate to remove these obstacles and help organizations succeed in their Threat Detection and Response programs. Our latest enhancements empower SOC analysts with full visibility and searchability into all data, including identity and access which until now has been a blind spot. Our extended platform capabilities also help CISOs align with business imperatives like controlling costs at scale and showing fast time to value on technology investments.”

Gurucul led the next-gen SIEM revolution by combining critical capabilities into a single pane of glass, including unified Threat Detection, Investigation and Response (TDIR), consolidated SIEM, XDR, User and Entity Behavior Analytics (UEBA), Network Traffic Analysis (NTA), Security Orchestration Automation and Response (SOAR), and Identity Access Analytics (IAA). The extended capabilities announced today deliver further innovation and value:

Get to Data Insights Faster with Maximum Searchability and Purpose-Built Use Cases

• 500 days of searchable data on all supported data lakes
• High-value use cases by industry, compliance, and telemetry
• Automated threat hunting with retrospective analysis on searchable historical data
• Chained models to detect advanced attack patterns across multiple systems/platforms and/or executed over a longer period
• Extended coverage and linking for MITRE ATT&CK framework to enrich the analyst’s understanding of an adversary’s tactics, techniques and procedures
• Enhanced analytics including ML behavior models and threat content to help organizations quickly and securely adapt to change
• Unparalleled UEBA detections that extend traditional SIEM capabilities into the areas of insider threat, network threat, and IOT/OT analytics

Read More about AiThority Interview: AiThority Interview with Ahmad Al Khatib, CEO and Founder at Qudo

Accelerate Response with Identity-Based Detections & Response

• Identify credential-based attacks that evade other systems
• Get 360-degree visibility into Identity and Access attack surface
• Consolidate identity, access entitlements and privileges across various systems: combine with behavioral analysis and other analytics to rapidly identify threats across an attack timeline
• Identify threats by leveraging analysis on privileged access misuse, outlier access, access collectors, dormant access, over-provisioned accounts, dormant entitlements, dynamic peer grouping, and rogue accounts
• Dynamically build precise response workflows with bi-directional integration with various identity systems including Azure AD, IAM, MFA, PAM, etc.

Reduce Cloud Costs and Improve Observability

• Monitored hybrid-cloud and multi-cloud observability to remove threat detection barriers for the SOC due to incomplete data
• Optimized cloud-native architecture to reduce storage cost
• Enhanced Intelligent Cloud Pipeline connects to any data using UI-driven SQS, S3, Azure Log Analytics, and BigQuery integration techniques

The Gurucul platform unifies a set of core capabilities that goes beyond current Next-Gen SIEM and XDR solutions that are not purpose-built to improve security operations, which leaves organizations unable to cost-effectively centralize observability and threat detection. Gurucul was positioned furthest to the right for completeness of vision in the 2022 Gartner Magic Quadrant for SIEM.* The company has won numerous awards for innovation including: Cyber Defense Magazine’s 2023 Global InfoSec Award for Cutting Edge Security Information and Event Management (SIEM), 19th Annual 2023 Globee Cybersecurity Awards for Most Innovative Security Company in Artificial Intelligence, a “Gold Winner” of Cybersecurity Insiders’ 2023 Cyber Security Excellence awards for Next-Gen SIEM, Security Today’s 2023 “CyberSecured” award in the Security and Automation Response category, and “Gold Winner” of Cybersecurity Insiders’ 2023 Cyber Security Excellence awards for Open XDR.

Availability and Pricing

The Gurucul platform is modular, delivering customized capabilities to match individual customer requirements. This includes full multi-tenancy, data segregation, flexible policy control and rapid scaling, especially suited for MDR providers. Customers can start with a single product and expand as needed with a simple license change, building towards a unified platform with no data replication or need to start over. Gurucul offers the following products including Analytics-driven SIEM, UEBA, Open XDR, Identity Access Analytics that include or can be delivered with Network Traffic Analysis (NTA), Security Orchestration, Automation and Response (SOAR) as stand-alone or add-on options. Gurucul’s Security Analytics and Operations Platform is available immediately from Gurucul and its business partners worldwide.

 Latest AiThority Interview Insights : AiThority Interview with Brad Anderson, President of Product and Engineering at Qualtrics

 [To share your insights with us, please write to sghosh@martechseries.com]