I think the strategic of bigger vendors is to include SIEM in their security platfrom. Some examples are Falcon of Crowdstrike, Xsiam Palo Alto and Microsoft with Unified portal ISOC. Moreover, agentic SOC like project perception of Microsoft.
I wonder what will be bugger security players in several years because AI security companies like OpenAI and Anthropic are investing a lot of money. What do you think?
David - fair question. The big platforms will try. The catch is all the data that lives outside their stack. Filip, are the migrations you see landing on one vendor or on open platforms? I'm at Stellar Cyber, our take: https://stellarcyber.ai/blog/the-siem-problem-is-an-architecture-problem/
Filip - "the same SOC on a new platform" is the line I'd hand every team running an AI SOC bake-off. Those evaluations keep turning into a data question: what can the agents actually see? (I'm at Stellar Cyber; our take: https://stellarcyber.ai/blog/the-siem-problem-is-an-architecture-problem/)
I think the strategic of bigger vendors is to include SIEM in their security platfrom. Some examples are Falcon of Crowdstrike, Xsiam Palo Alto and Microsoft with Unified portal ISOC. Moreover, agentic SOC like project perception of Microsoft.
I wonder what will be bugger security players in several years because AI security companies like OpenAI and Anthropic are investing a lot of money. What do you think?
I won't be surprised OpenAI and Anthropic to come up with SecOps offering and have full blown SIEM/ISOC platforms.
Google already has that advantage as they have their Security offering ,but they dont have the best integrations.
David - fair question. The big platforms will try. The catch is all the data that lives outside their stack. Filip, are the migrations you see landing on one vendor or on open platforms? I'm at Stellar Cyber, our take: https://stellarcyber.ai/blog/the-siem-problem-is-an-architecture-problem/
Filip - "the same SOC on a new platform" is the line I'd hand every team running an AI SOC bake-off. Those evaluations keep turning into a data question: what can the agents actually see? (I'm at Stellar Cyber; our take: https://stellarcyber.ai/blog/the-siem-problem-is-an-architecture-problem/)
Definitely at the end of the day is all about the context.