7 min read time

Micro Focus recognized as Visionary in 2022 Gartner Magic Quadrant for SIEM, with ArcSight evaluated

by   in Cybersecurity

We are excited to announce that Micro Focus has been recognized as a Visionary in the 2022 Gartner® Magic QuadrantTM for Security Information and Event Management, with our product solution CyberRes ArcSight having been evaluated.

Micro Focus recognized as Visionary in 2022 Gartner Magic Quadrant for SIEMMicro Focus was evaluated based on our Ability to Execute and Completeness of Vision. ArcSight has evolved a lot in recent years and we are very happy to have Micro Focus recognized as Visionary in the SIEM space. Part of the reason this excites us is that ArcSight was one of the first SIEM solutions to hit the market. With over 20 years of experience in the SIEM space, being seen as an innovator in today’s market shows that we aren’t slowing down. The SIEM market is continuously evolving and ArcSight is committed to delivering an innovative SIEM that addresses the needs and environments of our users.

Native SOAR, Threat Intelligence, and Enhanced UI drive value for ArcSight customers

Modern security operations teams face a litany of challenges, not the least of which is the need to do more with less. For years, the war for cybersecurity talent has taken its toll in limiting the capacity of security operations teams who struggle to hire and retain their analysts. Furthermore, the threat environment continues to grow and evolve at alarming rates, escalating the need for cyber resilience. As SOCs struggle to optimize their security environments, their efficiency and effectiveness suffer, and as a result, their organizations are exposed to excessive risk.

Micro Focus’ primary SIEM solution, CyberRes ArcSight, is built to ease these burdens for security operations teams. ArcSight is known for its 360° security analytics platform that combines real-time detection with ML-based behavioral analytics and big-data threat hunting. The ArcSight platform also includes native threat intelligence, native SOAR, and a modern single-pane-of-glass analytics interface. This platform provides users with a powerful, unique view of their cyber landscape that allows them to see and analyze data with more context and greater confidence. Combined with faster remediation through automation, ArcSight enables the modern SOC with rapid detection and response.

We believe that Micro Focus’ recognition as a Visionary is a result of our innovative strategy and product offering, including our bundling of native threat intelligence and native SOAR with our SIEM, as well as our enhanced UI.

ArcSight’s GTAP threat intelligence solution is a free-of-charge add-on for ArcSight customers that supplies open-source intelligence (OSINT) directly to ArcSight. Having threat intelligence automatically integrated into your security analytics enables your solutions to understand and detect the latest cyberthreats without requiring your analysts to do their own research. This frees up time for your analysts to focus on more important actions, such as investigating and responding to the highest-risk alerts and behavior occurring in your organization. The premium version of GTAP, called GTAP Plus, provides curated threat intelligence feeds and incorporates insights from CyberRes Galaxy’s threat research network to provide organizations with pro-active defenses.

Another valuable offering that comes bundled with ArcSight is its native SOAR. At Micro Focus, we consider SOAR to be an integral part of security operations. Speeding up threat detection is only half the battle after all… rapid response is also needed to effectively reduce exposure and risk. With ArcSight’s native SOAR solution, you take the burden off your security operations analysts by enabling them with a wide range of automation and collaboration capabilities. You can amplify the output of your team without the need for more headcount and for no additional charge.

Additionally, ArcSight’s updated user interface, ArcSight Fusion, provides modern timelining and graphical views of ArcSight’s multi-faceted security analytics. The current global threat environment requires the implementation of a variety of security approaches and solutions. By integrating these solutions together on a 360° platform with a shared UI, Fusion acts as a single-pane-of-glass to enhance contextual understanding while saving your analysts from having to switch back and forth between solutions.

The modern intelligent SOC is built on platforms that can digest, analyze, and interpret data in many ways, using a full range of analytic and response capabilities. Threat intelligence, SOAR, and a single-pane-of-glass to view it all from play critical roles in the intelligent SOC. We believe our focus in these areas have contributed to our recognition as a Visionary in the 2022 Gartner report.

Voice of the Customer for SIEMA 2021 Gartner Peer InsightsTm “Customers’ Choice” for SIEM

In addition to Micro Focus’ recognition as a Visionary in the 2022 Gartner Magic Quadrant for SIEM, Micro Focus was also recognized in the 2021 Gartner Peer Insights ‘Voice of the Customer’ for SIEM report as a “Customers’ Choice” in SIEM. Gartner’s ‘Voice of the Customer’ report is based on Gartner-verified customer reviews of SIEM vendors.  According to Gartner, “Vendors placed in the upper-right quadrant of the “Voice of the Customer” quadrants are recognized with the Gartner Peer Insights Customers’ Choice distinction, denoted with a Customers’ Choice badge. The recognized vendors meet or exceed both the market average Overall Rating and the market average User Interest and Adoption.”

We greatly value this recognition and feedback, as it represents the experiences of actual ArcSight users who use ArcSight on a daily basis, in real-world scenarios against serious threats.

Distinctions from Gartner

Looking at our recognitions from Gartner, we are confident that we can see a clear path of innovation, vision, and momentum for ArcSight in the SIEM space. We have every intention to keep this momentum going as we continue to provide positive experiences to our users while delivering on our vision for what the modern SIEM needs to be.

Innovation and Momentum: Distinctions from other Analysts

Other analysts in the past year and a half have acclaimed ArcSight as innovative, a Leader, and an outperformer in the SIEM market.

The following is a list of some of these other recent recognitions by industry analysts:

A Special Message to ArcSight Customers: Don’t Live in the Past… Upgrade Today!

With all the recognition ArcSight has been receiving for its innovation and customer ratings, we’d hate for any of our customers to be missing out! ArcSight users should consider upgrading their products to the most recent versions and solutions to take advantage of the many new features ArcSight has added in its latest releases. Built to enhance the ArcSight user experience, these new features include native SOAR, native Threat Intelligence, our modern widget-based Fusion UI, MITRE ATT&CK integration and dashboards, ML-based behavioral analytics, advanced big data threat hunting, SaaS options, and more. Learn more about our two most recent releases here: ArcSight 2022.1 and ArcSight 2021.1.

Gartner disclaimers

GARTNER and MAGIC QUADRANT are a registered trademark and service mark, and the GARTNER PEER INSIGHTS CUSTOMERS’ CHOICE badge and PEER INSIGHTS are trademarks and service marks, of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved.

Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences with the vendors listed on the platform, should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose. Gartner, “Magic Quadrant for Security Information and Event Management,” by Pete Shoard, Andrew Davies, and Mitchell Schneider, 10 October 2022.

Gartner, “Gartner Peer Insights ‘Voice of the Customer’: Security Information and Event Management”, 25 November 2021.


Security Operations