Software solutions that collect, correlate, and analyze security event data from across an enterprise to detect and investigate threats in real time.
Microsoft and Splunk together dominate AI responses for SIEM Platforms. Both brands consistently surface unprompted, with the model treating them as the default answers for most category queries. Brands outside the top two face a structural disadvantage: users are usually given these two before the model even considers alternatives.
Ranked by overall AI Visibility Score (geometric mean of LBA, Authority, and TOM). Click any brand for the full report.
| # | Brand | LBA | Authority | TOM | Overall |
|---|---|---|---|---|---|
| 1 |
Microsoft
microsoft.com
|
93 | 100 | 100 | 97 |
| 2 |
Splunk
splunk.com
|
84 | 82 | 98 | 88 |
| 3 |
Elastic
elastic.co
|
87 | 42 | 79 | 66 |
| 4 |
IBM
ibm.com
|
83 | 38 | 89 | 65 |
| 5 |
Google
google.com
|
80 | 32 | 82 | 59 |
| 6 |
Exabeam
exabeam.com
|
70 | 11 | 46 | 33 |
| 7 |
LogRhythm
logrhythm.com
|
71 | 5 | 51 | 26 |
| 8 |
Sumo Logic
sumologic.com
|
72 | 9 | 24 | 25 |
| 9 |
Rapid7
rapid7.com
|
79 | 5 | 23 | 21 |
| 10 |
CrowdStrike
crowdstrike.com
|
88 | 7 | 3 | 12 |
| 11 |
Securonix
securonix.com
|
74 | 1 | 10 | 8 |
| 12 |
Palo Alto Networks
paloaltonetworks.com
|
93 | 0 | 9 | 2 |
| 13 |
Devo
devo.com
|
71 | 0 | 4 | 1 |
| 14 |
Fortinet
fortinet.com
|
82 | 0 | 3 | 1 |
| 15 |
Graylog
graylog.org
|
67 | 0 | 1 | 1 |
| 16 |
RSA NetWitness
netwitness.com
|
68 | 0 | 1 | 1 |
| 17 |
Trellix
trellix.com
|
54 | 0 | 0 | 1 |
| 18 |
AlienVault
att.com
|
80 | 0 | 0 | 0 |
| 19 |
Blumira
blumira.com
|
48 | 0 | 0 | 0 |
| 20 |
Coralogix
coralogix.com
|
62 | 0 | 0 | 0 |
| 21 |
DNIF
dnif.it
|
36 | 0 | 0 | 0 |
| 22 |
Gurucul
gurucul.com
|
56 | 0 | 0 | 0 |
| 23 |
Hunters
hunters.security
|
38 | 0 | 0 | 0 |
| 24 |
LogPoint
logpoint.com
|
55 | 0 | 0 | 0 |
| 25 |
Logz.io
logz.io
|
64 | 0 | 0 | 0 |
| 26 |
ManageEngine ServiceDesk Plus
manageengine.com
|
48 | 0 | 0 | 0 |
| 27 |
OpenText SMAX
opentext.com
|
35 | 0 | 0 | 0 |
| 28 |
Panther
panther.com
|
39 | 0 | 0 | 0 |
| 29 |
P
Prelude
prelude.security
|
24 | 0 | 0 | 0 |
| 30 |
SearchInform SIEM
searchinform.com
|
31 | 0 | 0 | 0 |
| 31 |
SOC Prime
socprime.com
|
62 | 0 | 0 | 0 |
| 32 |
SolarWinds Web Help Desk
solarwinds.com
|
32 | 0 | 0 | 0 |
| 33 |
Stellar Cyber
stellarcyber.ai
|
60 | 0 | 0 | 0 |
Every brand in this leaderboard is scored against the same set of 263 shared SIEM Platforms prompts. The same prompts, same model, same iterations. So differences in scores reflect actual differences in AI visibility, not differences in measurement.
(LBA × Authority × TOM)^(1/3). Geometric mean is used so that any single weak metric pulls the overall score down, rather than being masked by strength elsewhere.
quality × meta × stability × share × recognition × 100. Read the full LBA methodology →