Solution Categories
Community Directory
Compare solutions
Benchmark my program
OpenText ArcSight Enterprise Security Manager
OpenText ArcSight Enterprise Security Manager collects and analyzes security data to identify and respond to threats. It integrates with various data sources to provide centralized event correlation and real-time monitoring.
Why these ratings?
Cyberse perspective
Summary by Cyberse
Microsoft Sentinel may be considered a good fit for you due to its powerful capabilities.
Here’s a few tips on how to maximize its capabilities:
We use the following criteria to rate this product’s functionality:
Cost considerations
A 10 000 EPS ArcSight ESM license is listed around CA$633 000, well above mid-market SIEM pricing. Peer reviews call the solution “super expensive” and note costs escalate with event volume and custom Flex connectors. Return-on-investment from analyst time savings is seldom mentioned, so payback is uncertain compared with newer security automation tools.
Functionality
ArcSight ESM provides rule-based automated responses, a small set of playbooks, and a built-in case management module. However, the playbook catalog is narrow and lacks a visual builder and rich metrics, so many teams add an external SOAR layer for broader workflow coverage
Compatibility
ArcSight ESM includes hundreds of maintained SmartConnectors and a published REST API, so mainstream firewalls, EDR, cloud services and ITSM systems link in without new code. Niche or home-grown tools usually need a custom parser or light scripting. This breadth places compatibility above average but not universally turnkey.
User experience
ArcSight ESM demands specialist staff because the console is complex and the learning curve is steep, according to peer reviews on Gartner and G2. Users report that navigation and query building feel cumbersome compared with newer SIEMs, so analysts spend extra time before becoming productive. Documentation exists but hands-on training is usually required, keeping the overall user experience below most security-automation rivals.
Customer support
Analyst reviews on Gartner and PeerSpot frequently report slow responses and the need to chase support tickets. G2 comparison data shows ArcSight’s support score trailing major SIEM rivals, indicating lower customer satisfaction. OpenText provides documentation and a portal but no publicly stated sub-4-hour SLA or 24×7 SOAR specialists, matching the rubric’s “slow responses” tier.