Your browser is not supported

For the best experience, use Google Chrome or Mozilla Firefox.


ArcSight Enterprise Security Manager

Empower your security operations team with ArcSight Enterprise Security Manager (ESM), a powerful, adaptable SIEM that delivers real-time threat detection and native SOAR technology to your SOC.

Monitor threats from across your enterprise

You need to see a threat before you can stop it. ArcSight’s scalable data collection framework gives you visibility into every security event across your organization. It makes your data more cost-effective and useful by aggregating, normalizing, and enriching it for security analytics.

bg bg

Reduce exposure with faster threat detection

When it comes to threat detection, every second counts. Detect and escalate known (documented) threats faster than ever with real-time correlation from a powerful SIEM. Backed by default content, intelligence feeds, customizable rule sets, and a community marketplace, ArcSight ESM is equipped to address any SIEM use case your organization faces, no matter how complex.

bg bg

Automated response saves your analysts' time

Coordinating a rapid response to threats is critical for resilient security operations. Automated responses and workflow processing keep your SOC efficient. ArcSight ESM works with leading digital workflow solutions such as ServiceNow, and comes with native SOAR technology, including automation and playbooks, incident management, and SOC analytics.

bg bg

Maximize the ROI of your existing tools

Seamlessly integrate ArcSight ESM with your existing security analytics solutions to boost their ROI and increase the efficiency of your SOC. Swap data, insights, and alerts with ArcSight Intelligence, ArcSight Recon, and our many ArcSight Partners. Then centralize those insights on our unified Fusion interface to contextually visualize and analyze potential threats.

bg bg

Optimize your environment with real‑world intel

Consistently evolve your team's security posture by integrating with valuable threat intelligence feeds and market-leading frameworks, such as MITRE ATT&CK, MISP, and Anomali. With ArcSight's MITRE ATT&CK dashboards and Navigator, you can maintain a clear view of your overall threat exposure and security coverage.

bg bg
  • Intuitive user experience

    ArcSight’s modern, web-based UI, known as ArcSight Fusion, is available through ESM and enables you to visualize, identify, and analyze potential threats with ease by incorporating intelligence from across the ArcSight Platform through a single interface.

  • A leader in MITRE ATT&CK mapping

    ArcSight ESM offers extensive mapping of detection content to the MITRE ATT&CK framework, out-of-the-box, with minimal configuration requirements. Our ATT&CK technique chain dashboards provide true “campaign” detection, without focusing solely on individual techniques.

  • Powerful dashboards

    ArcSight ESM’s security-focused visualizations will help your analysts to quickly identify threats, with insights into top threat intelligence alerts, targeted nodes, risky websites, MITRE Tactics, Active Lists and much more.

  • Native SOAR solution

    Speed up threat response and optimize your analysts’ workloads with native Security Orchestration, Automation and Response. The ArcSight SOAR comes included with ArcSight ESM.

  • Part of a unified SecOps platform

    ArcSight ESM integrates closely with ArcSight Intelligence and ArcSight Recon, to deliver Layered Analytics. Through the Fusion UI, you can analyze results cross-platform and navigate directly to other ArcSight solutions.

Peer Review

"The User Has Multiple Levels Of Options To Generate Reports And Get Alerted Based On Conditions."
"It makes the monitoring process easier by converting from different systems to different formats in different formats. It also has the ability to integrate with many different products."
"Ease of connectivity with third-party products adds to the flexibility of this solution."
"The best option as a SIEM platform, classic SIEM platform. Easy to deploy and has integration methods with 99% of the vendors/platforms."
"A fast, stable, and scalable solution with good reporting and log analysis functionalities."
"The filters and the ability to do what you want are the most valuable features. There is nothing that you cannot do in this solution. It has all the features, which makes it very dynamic."
"A Great Way To Manage End Point Devices."
"Easy in creating and scheduling reports on dashboard. Has a great market reach. Works well in detecting viruses."
"Powerful Distributed Real-Time Data Analytics."
"The tool has many functionalities that help a SOC/security team to identify threats and mitigate them in time. The new MITRE content is awesome."
"The product is very stable, the integration part with other products was easy. Correlation rules are very powerful and easy to create "

Related Resources

Related Products


ArcSight Intelligence

Behavioral analytics of security data to identify hidden threats and anomalous behavior.


ArcSight Recon

A comprehensive log management and security analytics solution that eases compliance burdens and accelerates forensic investigation.


ArcSight Marketplace

Download and deploy pre-packaged content to dramatically save time and effort.

See ArcSight in action

Interested in learning more about ArcSight ESM? Contact our security experts today to schedule a demonstration and see for yourself how ArcSight can increase your organization’s cyber resilience.

release-rel-2022-6-2-hotfix-7662 | Thu Jun 30 00:48:29 PDT 2022
Thu Jun 30 00:48:29 PDT 2022