Arcsight Inc.

Name: Arcsight Inc.
Brand: Arcsight Inc.

Micro Focus Security ArcSight ESM is an enterprise security information and event management (SIEM) solution that uses real-time data correlation to dramatically reduce the time to detect and respond to cyber threats and protect your business

Est 2000|Valuation $1.5B|Raised $75.7M|4 Ref Customers

LinkedIn 28|Website|FTEs 512|HQ Cupertino, California, US

MarketsSecurity Information and Event Management (SIEM)Security Orchestration, Automation, and Response (SOAR)

Platform CoversCyber Risk Management Vulnerability Management Board Reporting for Cyber Risk

01Competitive Landscape

Narrative analysis

Splunk vs ArcSight: Community commentary often contrasts Splunk’s faster searches with reported slower query performance in some ArcSight deployments. Actual performance varies by deployment architecture and tuning.
QRadar vs ArcSight: Both are long-established enterprise SIEMs. QRadar’s pricing models are more explicitly described in IBM materials, which some purchasers find helpful for procurement, although total cost still depends on sizing assumptions.
Cloud-native SIEMs (Sentinel, Chronicle, Securonix): These alternatives typically emphasize reduced infrastructure management and elastic search capabilities. ArcSight’s relative strength is in on-premises customization and control, while cloud-native options may offer simpler operational management for some buyers.

- Splunk vs ArcSight: Community commentary often contrasts Splunk’s faster searches with reported slower query performance in some ArcSight deployments. Actual performance varies by deployment architecture and tuning. - QRadar vs ArcSight: Both are long-established enterprise SIEMs. QRadar’s pricing models are more explicitly described in IBM materials, which some purchasers find helpful for procurement, although total cost still depends on sizing assumptions. - Cloud-native SIEMs (Sentinel, Chronicle, Securonix): These alternatives typically emphasize reduced infrastructure management and elastic search capabilities. ArcSight’s relative strength is in on-premises customization and control, while cloud-native options may offer simpler operational management for some buyers.

	ArcSight (OpenText)	Splunk	IBM QRadar SIEM
Starting Price	Quote-based (not publicly standardized)	Pricing varies by product and consumption model; some offerings publish host-based or consumption-based pricing	Quote-based; IBM documents common pricing models (EPS/FPM or MVS)
Recommended for	Large enterprises requiring deep correlation customization and on-prem control	Organizations prioritizing fast search performance and broad analytics ecosystem	Enterprises seeking traditional SIEM deployments with defined licensing models and appliance/VM options
Key Strength	Correlation rule capabilities and customization; broad event-source coverage in many deployments	Fast search and analytics capabilities with a large ecosystem and historical adoption	Clearer public description of licensing metrics and deployment flexibility
Key Weakness	Reported search latency at scale and operational complexity in some deployments	Cost can be significant; considerations for cloud migration and scale	Public perception and community discussion about product trajectory and UI in some cases