LogPoint Review

Overview

LogPoint’s vision is to produce the world’s best SIEM. They empower enterprises to transform data into actionable intelligence that supports business analytics, IT operations, compliance, and cyber security. Their advanced SIEM with UEBA presents AI-powered automation and sophisticated analytics features that help clients to securely build and manage, and effectively improve their companies. Further, the vendor’s flat licensing model is based on nodes and not on data volume. This significantly decreases the cost of implementing a SIEM platform as an MSSP, in the cloud, or on-premise.

LogPoint is simple to deploy and delivers fast time-to-value. The vendor backs up their software with 24/7 support to assist their partners and clients across the globe.

Benefits

LogPoint’s SIEM Platform – How it Works

SIEM stands for standing for Security Information and Event Management and in this process log data is ingested from various systems and then correlated to find indicators of attack/compromise and behavior patterns. The issue is implementations are highly technical in nature, which leads to many enterprises forgoing this security measure.

LogPoint’s SIEM platform is simple, scalable, and flexible, and provides streamlined design, integration, and deployment features to enable all businesses to leverage a reliable network security solution. This allows you to continuously extend the architecture with added capabilities without depending on a full release, to support your organization’s changing and growing needs.

The LogPoint platform is designed on the following tenants:

No firm should be restricted by the volume of data they can ingest into an SIEM application

Streamlined architectural guidelines to facilitate swift and efficient software implementations

Reliable support delivered 24x7 to assist clients to effectively utilize the SIEM program.

The vendor offers a SIEM sizing calculator to enable you to estimate the GB/day and EPS (events per second).

LogPoint Architecture

LogPoint’s SIEM solution for managed network security is divided into three modules that provide standard SIEM functionality. These modules are LogPoint Collectors, LogPoint Backend, and LogPoint Search head. They can be provided in one physical appliance or divided across multiple virtual/physical servers as needed by a business.

These modularized individual components give businesses flexibility in selecting a suitable SIEM architecture for their requirements. Smaller networks can opt for a simple design by deploying all components in one virtual appliance. Larger networks can split the modules across different network zones to decrease the possible burden on the network.

Product Features

Pricing

Licensing for LogPoint’s SIEM platform is based on the number of devices sending logs, and not events per second or the volume of your data. A LogPoint license can eliminate your worries about data limits and allows you to scale for future requirements in a predictable manner.

Use the SIEM sizing calculator on the LogPoint website to compute your pricing.