SIEM & Security Monitoring
SIEM platforms with UEBA and threat correlation
Find partners
AISOC
AISOC provides an AI-native security operations platform for organisations needing continuous protection without a traditional SOC. Its AISOC CORE engine monitors environments 24/7, detecting threats and automating alert triage, while AISOC SYNERGY acts as an AI analyst investigating every alert, mapping threats to MITRE ATT&CK and producing audit-ready PDF incident reports. Hosted on a UK secure sovereign cloud, it serves businesses and partners across the UK and beyond.
Censys
Censys provides an internet intelligence platform that gives security teams a continuously updated map of internet-facing assets and exposures. The platform serves attack surface management, adversary investigation, SOC modernisation, external exposure management and critical infrastructure resilience. Industries covered include financial services, energy and utilities, healthcare and government. More than 1,000 cybersecurity teams use Censys products. The platform's internet data has been independently validated in academic research and tested in US federal court proceedings under the Daubert standard.
CloudPeek
CloudPeek supplies an agentic AI platform for security operations that triages, investigates, hunts and contains threats across an existing security stack. Customers set the level of autonomy and keep their data and models under their own control, running cloud-first, hybrid or fully disconnected. The platform serves defence and national security networks, critical national infrastructure and regulated industries such as financial services. Each alert is enriched, correlated against estate context and prior incidents, then escalated with evidence or closed with a written reason. Access is also available through a Model Context Protocol server.
CloudSEK
CloudSEK provides a graph-based predictive attack path intelligence platform that correlates identities and exposures into attacker kill chains and disrupts them before exploitation. The platform covers digital risk, threat intelligence, external attack surface, AI system security and third-party ecosystem monitoring. AIVigil is CloudSEK's AI attack surface monitoring module that discovers, monitors and secures exposed AI infrastructure, MCP servers, vector databases, agentic workflows and shadow AI assets. More than 1,000 cybersecurity teams use CloudSEK products globally. CloudSEK raised $19 million in a Series B1 round.
CyberClan
CyberClan provides global incident response, breach remediation and managed security services, guaranteeing a response within 15 minutes when a breach occurs. Its Emergency Response Team operates around the clock, and its Post Breach Remediation team works to restore systems after an incident. CyberClan's Security Operations Centre delivers round-the-clock managed detection and response, while its Risk Management Services identify gaps through prioritised assessments rather than a single report. The company has supported clients including a Canadian law firm acting as a breach coach, a Lloyd's insurer in London, and a UK educational institution recovering from a cyber incident.
Hedgehog Security
SIEM-as-a-Service provider delivering integrated log management and monitoring to detect targeted attacks and data breaches.
Logmanager
Log management and SIEM platform offering radically simplified security event collection, analysis, and compliance reporting.
Logpoint UK
SIEM and SOAR platform for SMEs and enterprises detecting cyber threats through log analysis.
RiverSafe
RiverSafe provides cyber security, DevOps and application security services for large organisations with complex environments. Its application security work bridges security and development teams, embedding security into the development process without slowing developers down. RiverSafe's cyber defence services support SOC teams with tools that accelerate threat response and streamline investigations, working across SIEM, SOAR and UEBA platforms alongside platform management assessments. Its DevOps and engineering services aim to streamline software development pipelines and improve developer experience. An IT lead at an energy technology company is among the clients quoted in its testimonials.
Securonix
Cloud-native SIEM platform with UEBA, SOAR, and threat detection powered by machine learning.
Trellix
Trellix delivers intelligence-led cyber resilience for security-conscious organisations, combining operational threat intelligence with automated AI-powered threat detection and response. The platform correlates signals and data across endpoint, network, data, email, cloud and third-party controls to detect and respond to threats. It supports on-premises, air-gapped, cloud, hybrid and operational technology environments. Trellix Wise is its purpose-built generative AI capability for operational intelligence, and Trellix SecondSight provides expert threat hunting alongside global intelligence feeds.
Zerodai
Zerodai is a cyber GRC platform built for CISOs and security teams managing triage, risk and compliance with limited resources. When colleagues register change requests via Microsoft Teams, Zerodai automatically classifies each one, identifies applicable security controls and creates right-sized work packages involving Legal, Data Privacy, Procurement and IT. The risk management module follows a capture-assess-treat-monitor-review process, tracking treatments and tagging risks to business context. Compliance and audit controls are aligned to ISO 27001, NIST and CIS frameworks.
iDelta
iDelta provides Splunk consulting and digital resilience services across IT and operational technology environments. The company is a Splunk resource partner and has delivered Splunk projects for organisations including NatWest, Airbus, Tesco Bank and Lloyds Banking Group. Its products include an Open Banking app for Splunk that gives visibility of banking API traffic, and a Splunk ITSI Open Banking module for monitoring API performance and availability. iDelta also applies Splunk analytics to OT security in energy operations, covering oil and gas production and electrical transmission. The company is based in Edinburgh and was acquired by Sword Group in April 2025.
Showing 217–229 of 229 providers
Search all 229 providersAre you a SIEM & Security Monitoring provider?
Get listed and reach thousands of potential customers looking for siem & security monitoring services.