Learn More

Average Ratings 438 Ratings

Total
ease
features
design
support

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Graylog is the AI-powered SIEM and log management platform built to help security and IT operations teams work faster, stay focused, and stay in control. It brings together all your event data in one place so teams can detect real threats quickly, investigate efficiently, and manage data costs predictably—without compromise. Graylog’s explainable AI turns noise into clarity, highlighting what matters most and guiding analysts through consistent, confident response steps. Its open, flexible architecture adapts to any environment, empowering organizations to scale and evolve without being locked into rigid systems or unpredictable pricing. With Graylog Security, Enterprise, API Security, and Open, more than 60,000 organizations worldwide rely on Graylog to deliver faster insight, simpler operations, and a smarter path to SIEM without compromise.

Description

ITrust operates the Control and Supervision Center, known as the Security Operation Center (SOC), which is dedicated to overseeing the security measures of an organization, either in full or in part. By relying on our IT security experts, you can focus on your primary business objectives while we handle the cybersecurity of your information systems. Often referred to as a Managed Security Services Provider (MSSP) or Managed Detection and Response (MDR), we specialize in safeguarding your company and effectively responding to any security incidents that may arise. The SOC established and/or managed by ITrust enhances your cyber defense capabilities while ensuring that your services remain accessible at the most economical rate, all while adhering to necessary compliance regulations. Our user-friendly graphical interface is not only clear but also customizable, providing an in-depth view of activities and enabling comprehensive monitoring of the security across your servers, routers, applications, databases, and websites, ensuring you remain informed about your organization's cybersecurity status at all times.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Ansible Yes 
Azure Marketplace Yes 
Cisco Adaptive Security Appliance (ASA) Yes 
F5 BIG-IP Yes 
FortiGate Cloud Yes 
Icinga Yes 
Kapacitor Yes 
LDAP Yes 
NXLog Yes 
Qualys Container Security Yes 
Rapid7 Command Platform Yes 
Salesforce Yes 
Sandfly Security Yes 
ServiceNow Asset Management Yes 
Signal9 Yes 
Squadcast Yes 
Telegraf Yes 
Tenable One Yes 
Terraform Yes 
Zenduty Yes 

Integrations

Ansible No 
Azure Marketplace No 
Cisco Adaptive Security Appliance (ASA) No 
F5 BIG-IP No 
FortiGate Cloud No 
Icinga No 
Kapacitor No 
LDAP No 
NXLog No 
Qualys Container Security No 
Rapid7 Command Platform No 
Salesforce No 
Sandfly Security No 
ServiceNow Asset Management No 
Signal9 No 
Squadcast No 
Telegraf No 
Tenable One No 
Terraform No 
Zenduty No 

Pricing Details

$1250/month
Free Trial Yes 
Free Version Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux Yes 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Graylog

Founded

2009

Country

United States

Website

graylog.org

Vendor Details

Company Name

ITrust

Country

France

Website

www.itrust.fr/en/security-control-centre-soc/

Product Features

API Security

Graylog empowers security teams by providing comprehensive insights across logs, events, and API interactions, which are crucial for identifying threats, examining incidents, and executing precise responses. With Graylog Enterprise, organizations can manage logs at scale, utilizing robust search capabilities, alert systems, and correlation features to speed up root cause investigations. Building upon this foundation, Graylog Security introduces enhanced threat detection, ready-to-use content for prevalent attack methods, and seamless integration with Security Operations Centers (SOCs). Meanwhile, Graylog API Security enhances oversight of the increasingly important API landscape by automatically discovering APIs, pinpointing sensitive data vulnerabilities, and detecting data breaches in real time. Collectively, the Graylog platform offers integrated, cost-effective security operations and API safeguarding—available both on-premises and in cloud environments—enabling teams to effectively identify, investigate, and address critical security issues.

Cybersecurity

Graylog is a cutting-edge log management and SIEM platform harnessing the power of AI, specifically designed to meet the needs of security teams in real-world scenarios. It aggregates logs and security information from cloud, on-premises, and hybrid setups, empowering teams to identify threats more quickly, conduct thorough investigations, and manage data expenses—all while avoiding vendor lock-in. This platform merges scalable log management with effective, understandable AI, which helps minimize alert fatigue, highlight genuine risks, and facilitate investigations from identification to resolution. Through selective data ingestion and smart data tiering, Graylog ensures that SIEM expenses remain manageable, while its built-in detection capabilities, correlation functions, threat intelligence, and guided workflows enable lean teams to work effectively. Offering adaptable deployment options, open integrations, and targeted solutions for Security Operations, IT Operations, and API Security, Graylog provides organizations with enhanced visibility, accelerated response times, and full control over their data—without the added complexity.

AI / Machine Learning No 
Behavioral Analytics No 
Endpoint Management No 
IOC Verification No 
Incident Management No 
Tokenization No 
Vulnerability Scanning No 
Whitelisting / Blacklisting No 

IT Security

Graylog serves as a comprehensive platform for centralized log management and IT security, empowering teams to confidently monitor, investigate, and safeguard intricate environments. It aggregates and analyzes log data from a variety of sources, including servers, applications, networks, and cloud infrastructure, providing real-time insights into security vulnerabilities, configuration errors, and operational threats. Engineered for optimal efficiency, Graylog minimizes unnecessary data with standardized information, focused alerts, and structured workflows, enabling IT and security personnel to quickly grasp ongoing situations and respond accordingly. Its versatile deployment options allow for on-premises, cloud, and hybrid solutions, while selective data ingestion and smart tiered storage help maintain predictable costs related to storage and licensing. Featuring open integrations, built-in dashboards, and robust search capabilities, Graylog enhances visibility for IT teams, accelerates troubleshooting, and fortifies security—without introducing complexity or dependence on a single vendor.

Anti Spam No 
Anti Virus No 
Email Attachment Protection No 
Event Tracking No 
IP Protection No 
Internet Usage Monitoring No 
Intrusion Detection System No 
Spyware Removal No 
Two-Factor Authentication No 
Vulnerability Scanning No 
Web Threat Management No 
Web Traffic Reporting No 

Log Analysis

Graylog converts unprocessed log data into valuable insights. By standardizing and enhancing information from various systems, it enables teams to identify trends, recognize irregularities, and comprehend the narratives behind events as they unfold. With its user-friendly search capabilities, customizable dashboards, and AI-driven summaries, Graylog simplifies the process of identifying root causes, recognizing potential issues, and confirming solutions—without the need to learn a specific query language or sift through irrelevant information. Whether addressing performance challenges, tracking system availability, or probing security breaches, Graylog facilitates quicker decision-making and minimizes resolution time. The outcome is swifter insights, fewer overlooked issues, and increased assurance that all systems are functioning optimally and securely.

Log Management

Graylog consolidates and scrutinizes event and log data from intricate environments, equipping IT and security teams with essential insights to identify problems, probe incidents, and uphold compliance standards. In contrast to conventional tools that require compromises between affordability, scalability, and speed, Graylog streamlines the processes of log collection, storage, and searching through an intuitive onboarding experience, built-in data parsing, and a budget-friendly data lake that allows users to access only the necessary information. This cohesive methodology aids teams in swiftly identifying issues, minimizing cloud-related expenses, and ensuring readiness for audits—eliminating the burden of complicated setups and unpredictable costs. It offers comprehensive log management without sacrifices.

Archiving Yes 
Audit Trails Yes 
Compliance Reporting Yes 
Consolidation Yes 
Data Visualization Yes 
Event Logs Yes 
Network Logs Yes 
Remediation Yes 
Syslogs Yes 
Thresholds Yes 
Web Logs Yes 

Log Monitoring

Graylog integrates ongoing log surveillance with interpretable AI, providing IT, DevOps, and security professionals with instantaneous insights and enhanced visibility in intricate environments. It aggregates logs from various cloud, on-premises, and hybrid platforms, employing AI-generated summaries and anomaly detection to focus on key issues—be it a performance glitch, a deployment failure, or a security concern. Equipped with customizable dashboards, alert thresholds, and guided remediation options, teams can swiftly transition from receiving alerts to taking action. Graylog’s AI capability helps filter out unnecessary noise, pinpoint root causes, and maintain a stable, secure, and compliant infrastructure—offering seamless log monitoring without any trade-offs.

Security Orchestration, Automation and Response (SOAR)

Graylog improves the efficiency of Security Orchestration, Automation, and Response (SOAR) processes by incorporating automation and guided remediation directly within the SIEM, while still maintaining the functionality of specialized SOAR platforms. Its integrated features facilitate swift responses through AI-guided remediation steps, incident management, and threat intelligence connections. Event Procedures offer standardized guidance, while automated tasks manage alerts, data lookups, and evidence gathering. Security analysts are equipped with actionable insights through consolidated analytics and smooth integrations, minimizing false positives and reducing manual labor. This leads to quicker, more dependable investigations and enhanced collaboration throughout the entire security framework.

SIEM

Graylog empowers security and IT professionals to navigate the vast amounts of data generated within their environments every moment. As a comprehensive SIEM and log management solution, Graylog aggregates, standardizes, and connects event data from various sources, whether on-premises, in the cloud, or across hybrid systems. With the ability to swiftly visualize activities, identify irregularities, and probe potential threats through AI-enhanced summaries, structured response workflows, and adaptable dashboards, analysts gain valuable insights. This enhanced clarity eliminates excessive alerts and transforms unrefined data into actionable intelligence. For organizations striving to optimize resources amidst limited teams and budgets, Graylog is essential, offering full visibility, expedited investigations, and predictable pricing—providing a SIEM experience that meets the highest standards.

Application Security Yes 
Behavioral Analytics Yes 
Compliance Reporting Yes 
Endpoint Management No 
File Integrity Monitoring No 
Forensic Analysis Yes 
Log Management Yes 
Network Monitoring Yes 
Real Time Monitoring Yes 
Threat Intelligence Yes 
User Activity Monitoring Yes 

User and Entity Behavior Analytics (UEBA)

Graylog Security integrates artificial intelligence, machine learning, and behavioral analysis to empower teams in identifying and addressing threats that conventional rules often overlook. Its User and Entity Behavior Analytics (UEBA) continuously evolves by learning the typical behaviors of users, hosts, and applications, allowing it to adjust to emerging behaviors and risks. By connecting anomalies with log data, asset information, and threat intelligence, Graylog effectively identifies significant threats—like insider threats or credential misuse—while minimizing false alarms. The platform's AI-driven summarization and structured investigation processes provide analysts with clear insights and expedite the triage process, enabling them to translate intricate data into prompt, informed decisions.

Product Features

Log Management

Archiving No 
Audit Trails No 
Compliance Reporting No 
Consolidation No 
Data Visualization No 
Event Logs No 
Network Logs No 
Remediation No 
Syslogs No 
Thresholds No 
Web Logs No 

SIEM

Application Security No 
Behavioral Analytics No 
Compliance Reporting No 
Endpoint Management No 
File Integrity Monitoring No 
Forensic Analysis No 
Log Management No 
Network Monitoring No 
Real Time Monitoring No 
Threat Intelligence No 
User Activity Monitoring No 

Alternatives

Fluentd Reviews

Fluentd

Fluentd Project

Alternatives

TeskaLabs SIEM Reviews

TeskaLabs SIEM

TeskaLabs
Grafana Loki Reviews

Grafana Loki

Grafana