Looking at Elastic? Its Elastic Security targets search analytics and SIEM for security teams and SOCs. Compare features, fit and the top SIEM alternatives here.
Security Operations
Threat Hunting Tools: Proactively Find Hidden Attackers
Find threats your alerts missed. Evaluate threat hunting tools with query languages, hypothesis workflows, MITRE ATT&CK mapping and managed hunting add-ons.
15 vendors18 products
See the Top 15 rankingThreat Hunting vendors 15
Companies that offer Threat Hunting.
Featured vendors
Founded in 2013 and based in Foster City, Exabeam builds SIEM and user and entity behavior analytics. See Exabeam Advanced Analytics, who they suit and how they compare.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
Arctic Wolf
Eden Prairie, Minnesota, USA
CrowdStrike
Austin, Texas, USA
Elastic
Mountain View, California, USA
Exabeam
Foster City, California, USA
Google Cloud
Mountain View, California, USA
Huntress
Ellicott City, Maryland, USA
Mandiant
Reston, Virginia, USA
Microsoft
Redmond, Washington, USA
Rapid7
Boston, Massachusetts, USA
Red Canary
Denver, Colorado, USA
Secureworks
Atlanta, Georgia, USA
Securonix
Addison, Texas, USA
SentinelOne
Mountain View, California, USA
Splunk
San Francisco, California, USA
Trellix
San Jose, California, USA
Threat Hunting products 18
Open a product to see its features, pricing and reviews, or compare it with others.
Arctic Wolf Managed Detection and Response
Arctic Wolf Managed Detection and Response: MITRE ATT&CK mapping and proactive threat hunting. Built for 24/7 SOC threat monitoring. Compare MDR alternatives.
CrowdStrike Falcon OverWatch
CrowdStrike Falcon OverWatch is a 24/7 managed threat hunting service for hands-on-keyboard adversary disruption. See features and Threat Hunting alternatives.
CrowdStrike Falcon Threat Hunting
CrowdStrike Falcon Threat Hunting covers continuous kernel telemetry recording and MITRE ATT&CK mapping for proactive threat hunting. Compare top Threat Hunting tools.
Elastic Security
Get the facts on Elastic Security: unified SIEM & XDR and petabyte log analytics. Built for SIEM log analytics. Compare it with other SIEM options before you decide.
Exabeam Security Operations Platform
Exabeam Security Operations Platform from Exabeam focuses on automated alert triage. Key capabilities: response automation. Compare it with the leading UEBA alternatives.
Exabeam Threat Hunter
Evaluating Exabeam Threat Hunter? See how this Threat Hunting tool handles Smart Timelines integration, where it fits best and which alternatives to compare.
Google Security Operations
Looking for Security Operations software? Google Security Operations by Google Cloud provides YARA-L rule engine for alert triage. Compare features and alternatives.
Huntress Managed Detection and Response
Huntress Managed Detection and Response covers 24/7 human threat hunting and persistent foothold detection for managed SOC and Foothold Detection. Compare top MDR tools.
Huntress Managed SIEM
Looking for Managed SIEM software? Huntress Managed SIEM by Huntress provides managed 24/7 SIEM for Cloud Log Monitoring. Compare features and alternatives.
Mandiant Managed Defense
Mandiant Managed Defense is a 24/7 managed detection & response for 24/7 proactive threat hunting and frontline adversary detection. See features and MDR alternatives.
Microsoft Defender XDR
Microsoft Defender XDR covers cross-domain correlation, incident management and automated investigation for SOC operations and incident response. Compare top XDR tools.
Rapid7 InsightIDR
Rapid7 InsightIDR is a cloud-native SIEM & extended detection and response for centralized log auditing and lateral movement tracking. See features and SIEM alternatives.
Red Canary Managed Detection and Response
Red Canary Managed Detection and Response: 24/7 threat hunting and raw telemetry correlation. Built for 24/7 managed detection and response. Compare MDR alternatives.
Secureworks Taegis ManagedXDR
See what Secureworks Taegis ManagedXDR offers: threat hunting. It is built for SOC augmentation, supports cloud deployment and competes with other XDR tools.
Securonix Unified Defense SIEM
Get the facts on Securonix Unified Defense SIEM: automated SOAR playbooks. Built for cloud threat detection. Compare it with other SIEM options before you decide.
SentinelOne Singularity Threat Hunting
SentinelOne Singularity Threat Hunting is an autonomous threat hunting & forensic query suite for proactive threat hunting. See features and Threat Hunting alternatives.
Splunk Enterprise Security
Splunk Enterprise Security is an analytics-driven enterprise SIEM for flagship SIEM and risk-based alerting. See features and Security Analytics alternatives.
Trellix XDR
Trellix XDR from Trellix focuses on cross-vector XDR correlation. Key capabilities: unified XDR and threat hunting. Compare it with the leading XDR alternatives.