LogPoint

LogPoint is a security operations platform that brings SIEM, SOAR, user behaviour analytics and endpoint security together in one product. It is aimed at security teams that want fewer separate tools to run.

What LogPoint does

• SIEM: pulls events and incidents out of large volumes of logs and shows correlated results on role-based dashboards.
• SOAR automation: playbooks investigate alerts and recommend a response that analysts can approve quickly.
• UEBA: compares normal and abnormal activity to spot insider threats and misused credentials.
• Threat detection and response: automated investigation and threat hunting against phishing, malware and ransomware.
• Cloud and infrastructure visibility: covers cloud data, applications and infrastructure.
• Compliance reporting: reports for GDPR, NIS2, PCI DSS, NERC-CIP and SOX, among others.

Customers and markets

Organisations of any size that need to monitor IT infrastructure, including those running SAP systems.

Key facts

• Deployment: one converged platform in place of several point products
• Context: alerts are enriched with threat intelligence and business context