Software solutions that collect, correlate, and analyze security event data from across an enterprise to detect and investigate threats in real time.
Microsoft and Splunk together dominate AI responses for SIEM Platforms. Both brands consistently surface unprompted, with the model treating them as the default answers for most category queries. Brands outside the top two face a structural disadvantage: users are usually given these two before the model even considers alternatives.
Ranked by overall AI Visibility Score (smoothed geometric mean of LBA, Authority, and TOM with an LBA-based floor on Authority and TOM, see methodology). Click any brand for the full report.
| # | Brand | LBA | Authority | TOM | Overall |
|---|---|---|---|---|---|
| 1 |
Microsoft
microsoft.com
|
93 | 100 | 100 | 97 |
| 2 |
Splunk
splunk.com
|
84 | 82 | 98 | 88 |
| 3 |
Elastic
elastic.co
|
87 | 42 | 79 | 66 |
| 4 |
IBM
ibm.com
|
83 | 38 | 89 | 66 |
| 5 |
Google
google.com
|
80 | 32 | 82 | 60 |
| 6 |
Exabeam
exabeam.com
|
70 | 11 | 46 | 34 |
| 7 |
LogRhythm
logrhythm.com
|
71 | 7 | 51 | 32 |
| 8 |
Sumo Logic
sumologic.com
|
72 | 9 | 24 | 27 |
| 9 |
Rapid7
rapid7.com
|
79 | 8 | 23 | 26 |
| 10 |
Palo Alto Networks
paloaltonetworks.com
|
93 | 9 | 10 | 23 |
| 11 |
CrowdStrike
crowdstrike.com
|
88 | 9 | 9 | 21 |
| 12 |
Fortinet
fortinet.com
|
82 | 8 | 8 | 20 |
| 13 |
Securonix
securonix.com
|
74 | 7 | 10 | 20 |
| 14 |
AlienVault
att.com
|
80 | 8 | 8 | 19 |
| 15 |
Devo
devo.com
|
71 | 7 | 7 | 17 |
| 16 |
RSA NetWitness
netwitness.com
|
68 | 7 | 7 | 17 |
| 17 |
Graylog
graylog.org
|
67 | 7 | 7 | 16 |
| 18 |
Logz.io
logz.io
|
64 | 6 | 6 | 16 |
| 19 |
Coralogix
coralogix.com
|
62 | 6 | 6 | 15 |
| 20 |
SOC Prime
socprime.com
|
62 | 6 | 6 | 15 |
| 21 |
Stellar Cyber
stellarcyber.ai
|
60 | 6 | 6 | 15 |
| 22 |
Gurucul
gurucul.com
|
56 | 6 | 6 | 14 |
| 23 |
LogPoint
logpoint.com
|
55 | 6 | 6 | 14 |
| 24 |
Trellix
trellix.com
|
54 | 5 | 5 | 14 |
| 25 |
Blumira
blumira.com
|
48 | 5 | 5 | 12 |
| 26 |
ManageEngine ServiceDesk Plus
manageengine.com
|
48 | 5 | 5 | 12 |
| 27 |
Hunters
hunters.security
|
38 | 4 | 4 | 10 |
| 28 |
OpenText SMAX
opentext.com
|
35 | 3 | 5 | 10 |
| 29 |
Panther
panther.com
|
39 | 4 | 4 | 10 |
| 30 |
DNIF
dnif.it
|
36 | 4 | 4 | 9 |
| 31 |
SolarWinds Web Help Desk
solarwinds.com
|
32 | 3 | 3 | 9 |
| 32 |
SearchInform SIEM
searchinform.com
|
31 | 3 | 3 | 8 |
| 33 |
P
Prelude
prelude.security
|
24 | 2 | 2 | 7 |
Every brand in this leaderboard is scored against the same set of 263 shared SIEM Platforms prompts. The same prompts, same model, same iterations. So differences in scores reflect actual differences in AI visibility, not differences in measurement.
composite = ((LBA + 5)(Authority + 5)(TOM + 5))^(1/3) - 5. The floor keeps brands the model clearly recognises but doesn't yet recommend from collapsing to zero, while a single genuinely weak metric still pulls the composite down. Full methodology.
quality × meta × stability × share × recognition × 100. Read the full LBA methodology →