OpenText ArcSight Enterprise Security Manager
OpenText ArcSight Enterprise Security Manager
Updated August 20, 2025
Updated August 20, 2025
OpenText ArcSight Enterprise Security Manager collects and analyzes security data to identify and respond to threats. It integrates with various data sources to provide centralized event correlation and real-time monitoring.
OpenText ArcSight Enterprise Security Manager collects and analyzes security data to identify and respond to threats. It integrates with various data sources to provide centralized event correlation and real-time monitoring.
Security Information and Event Management
Cost considerations
Cost considerations
Functionality
Functionality
Compatibility
Compatibility
User experience
User experience
Customer support
Customer support
Why these ratings?
Cyberse perspective
Cyberse perspective
Solution details
Target industry
Technology
Public sector
Industrials
Healthcare
Retail
Manufacturing
Financial services
Services support
In-house services
Third party integrators
Managed services
Product features
Security Incident and Event Management (SIEM)
Security operations management
Market segment
Enterprise
Key features
API access
Platform solution
Integrations
Endpoint security
Vulnerability management
Identity security
Cloud security
Governance Risk and Compliance
Network security
Data security
Deployment
On-premises
Cloud-hosted
Cloud ecosystem partners
Amazon Web Services
Microsoft Azure Cloud
Google Cloud Platform
Ratings
Cost considerations
A 10 000 EPS ArcSight ESM license is listed around CA$633 000, well above mid-market SIEM pricing. Peer reviews call the solution “super expensive” and note costs escalate with event volume and custom Flex connectors. Return-on-investment from analyst time savings is seldom mentioned, so payback is uncertain compared with newer security automation tools.
Cost considerations
A 10 000 EPS ArcSight ESM license is listed around CA$633 000, well above mid-market SIEM pricing. Peer reviews call the solution “super expensive” and note costs escalate with event volume and custom Flex connectors. Return-on-investment from analyst time savings is seldom mentioned, so payback is uncertain compared with newer security automation tools.
Functionality
ArcSight ESM provides rule-based automated responses, a small set of playbooks, and a built-in case management module. However, the playbook catalog is narrow and lacks a visual builder and rich metrics, so many teams add an external SOAR layer for broader workflow coverage
Functionality
ArcSight ESM provides rule-based automated responses, a small set of playbooks, and a built-in case management module. However, the playbook catalog is narrow and lacks a visual builder and rich metrics, so many teams add an external SOAR layer for broader workflow coverage
Compatibility
ArcSight ESM includes hundreds of maintained SmartConnectors and a published REST API, so mainstream firewalls, EDR, cloud services and ITSM systems link in without new code. Niche or home-grown tools usually need a custom parser or light scripting. This breadth places compatibility above average but not universally turnkey.
Compatibility
ArcSight ESM includes hundreds of maintained SmartConnectors and a published REST API, so mainstream firewalls, EDR, cloud services and ITSM systems link in without new code. Niche or home-grown tools usually need a custom parser or light scripting. This breadth places compatibility above average but not universally turnkey.
User experience
ArcSight ESM demands specialist staff because the console is complex and the learning curve is steep, according to peer reviews on Gartner and G2. Users report that navigation and query building feel cumbersome compared with newer SIEMs, so analysts spend extra time before becoming productive. Documentation exists but hands-on training is usually required, keeping the overall user experience below most security-automation rivals.
User experience
ArcSight ESM demands specialist staff because the console is complex and the learning curve is steep, according to peer reviews on Gartner and G2. Users report that navigation and query building feel cumbersome compared with newer SIEMs, so analysts spend extra time before becoming productive. Documentation exists but hands-on training is usually required, keeping the overall user experience below most security-automation rivals.
Customer support
Analyst reviews on Gartner and PeerSpot frequently report slow responses and the need to chase support tickets. G2 comparison data shows ArcSight’s support score trailing major SIEM rivals, indicating lower customer satisfaction. OpenText provides documentation and a portal but no publicly stated sub-4-hour SLA or 24×7 SOAR specialists, matching the rubric’s “slow responses” tier.
Customer support
Analyst reviews on Gartner and PeerSpot frequently report slow responses and the need to chase support tickets. G2 comparison data shows ArcSight’s support score trailing major SIEM rivals, indicating lower customer satisfaction. OpenText provides documentation and a portal but no publicly stated sub-4-hour SLA or 24×7 SOAR specialists, matching the rubric’s “slow responses” tier.
Explore similar solutions
Explore similar solutions
Explore other categories
Explore other categories
Cyberse provides free tools for cybersecurity buyers to assess needs, research solutions, and compare products.
Cyberse provides free tools for cybersecurity buyers to assess needs, research solutions, and compare products.
Subscribe
