Exabeam

Exabeam provides security analytics centred on user and entity behaviour, and the company has merged with LogRhythm, so both product lines now sit under one organisation. A buyer researching either name will find material describing them as competitors, which is no longer the case.

Behavioural analytics addresses the detection problem rule based systems cannot solve. A rule catches what somebody thought to write a rule for, which by definition excludes anything novel, whereas modelling what normal looks like for each user and machine flags the unusual without anyone having anticipated the specific technique.

Compromised credentials are the case where this matters most and where rules fail hardest. An attacker using a legitimate account with valid credentials breaks no rule at all, and the only signal is that the account is behaving unlike itself: different hours, different systems, different data volumes.

The honest difficulty is that behaviour changes for innocent reasons constantly. Somebody joins a new project, covers for a colleague on leave or starts working different hours, and a model too sensitive to those buries the team in alerts while one too tolerant misses the intrusion. Tuning that boundary is the real work of deploying this class of product.

No pricing is published, and the merger makes it worth asking which product line a quote covers and what the roadmap is for the other.