I use Open XDR Security Operations Platform as a SIEM. It aggregates and correlates logs from our different security solutions in one place, which is incredibly helpful for acting on them accordingly. I really like their implementation team; they can basically integrate any security solution with Open XDR Security Operations Platform. They develop parsers for different security solutions, and integrating them is a breeze. The initial setup was very easy, thanks to the presales team who helped us get to know the platform very quickly.

As an SOC Analyst, I use the Open XDR Security Operations Platform daily to monitor, investigate, and respond to security incidents. What I like best is how it consolidates multiple data sources into a single, unified view. Instead of switching between different tools for endpoint, network, and cloud telemetry, I can correlate everything in one dashboard. This saves significant time during investigations and reduces alert fatigue. The automated correlation engine is particularly valuable. It highlights relationships between alerts and helps prioritize true threats over noise. The built-in playbooks for response automation also make incident handling faster and more consistent. For example, I can automatically isolate a compromised endpoint or enrich alerts with threat intelligence without manual effort.

The thing I like best about Stellar Cyber is its ability to integrate a variety of connectors. There has been an instance where there are hesitations regarding its compatibility with what we used. But those were not an issue with this platform. Custom alerts and filters are also great because it gives us a more refined visibility on what's needed to focus on. It is also easy to implement and pretty straightforward. The dashboard is great for beginners because you can easily understand what you see. It doesn't look super technical unlike the other platforms related to Stellar Cyber.