Recently active topics

🐾 Meet Taylor VoigtCustomer Success Program Manager | Builder of Better Experiences @ SecuronixIf there’s magic happening behind the scenes in our customer experience, there’s a good chance Taylor had a hand in it. As a Customer Success Program Manager, she partners with Christine Strom and Ismael Cervantes to turn big ideas into real programs that make life easier (and better) for our customers.Taylor’s journey started in IT administration and project management, where she built a reputation for solving tough problems and keeping complex systems on track. She later moved into the SIEM space as a Customer Success Manager, working directly with customers to help them get real results from their technology. Now, she’s focused on the bigger picture — shaping customer journey processes and customer value initiatives that help every Securonix user feel supported, seen, and successful.💡 What Taylor Brings to the Table A people-first mindset — Taylor believes relationships are at the heart

🌟 Meet Christine StromSenior Director, Customer Success Services & Operations | Champion of Culture at SecuronixIf you’ve ever met Christine, you know she’s the heartbeat of customer success here at Securonix. As our Senior Director of Customer Success Services and CS Operations, she brings a rare blend of operational precision, people-first leadership, and contagious enthusiasm to everything she does.With a career built across Customer Success and Professional Services leadership in technology companies, Christine has helped shape what exceptional customer partnerships look like — both in process and in spirit. She’s the kind of leader who makes big goals feel doable and complex programs feel human.💬 Christine’s Superpowers Culture Champion: Whether it’s for our customers or our teams, she builds connection, trust, and energy everywhere she goes. Customer Whisperer: Decades of experience helping clients reach their goals — and the intuition to know when they need strategy vers

👋 Meet Isaac VilchezDirector of Technical Support | Securonix Customer Community LeadSay hi to Isaac — the guy making sure you’re never stuck in support-limbo. As Director of Technical Support at Securonix, he leads the team that keeps your systems running smoothly, helps uncover what’s really going on when things go sideways, and ensures you have the resources to succeed. And yes — he’s also the friendly ear of our community, here to make sure your voice gets heard.🎉 Fun Facts About IsaacHe’s all about turning problems into stories of success, because he believes every support ticket has the potential to teach something. Loves to bridge the gap: between support and product, between big picture strategy and the day-to-day tech grind. Great at taking tech speak and translating it into “Oh I see how that works now” for everyone — customers, teammates, and partners alike. If he’s not helping your implementation go off without a hitch, you’ll probably find him plotting ways to make our s

👋 Meet Ismael CervantesDirector of Solutions & Strategic Enablement | Creator of the Securonix Customer CommunityIf our customer community had a mayor, it’d be Ismael. He’s the one who dreamed this space up — a place where customers, partners, and Securonix folks can swap ideas, celebrate wins, and make the platform even better together.By day, Ismael leads our Solutions & Strategic Enablement team — the crew that helps turn security vision into real-world outcomes. He’s passionate about connecting people, processes, and technology so that everyone can get the most out of Securonix.⚡ A Few Things to Know About Ismael He’s a problem-solver at heart, always looking for smarter, faster, cleaner ways to do things (and usually with a smile). Known for saying things like “let’s make it work for you” — because he really means it. Loves seeing customers succeed and sharing that success across the community. Has a knack for turning complex tech talk into something you actually wa

Release Date: November 6, 2025Audience: Security Professionals, SOC Teams, MSSPs🚀 OverviewHello Securonix Connect community!We’re ecstatic to introduce Data Pipeline Manager (DPM) with DPM Flex Consumption, a game-changer in SIEM data management! This innovative feature arms you with AI-enabled, value-based data consumption, allowing you to efficiently handle data growth while keeping costs predictable. No longer must you sacrifice threat visibility for budget constraints. 🎉🆕 What's NewNo more skimping on data! Enhance visibility with up to 40% more data capacity. Integrated at no additional cost – It's all part of the Securonix platform. Seamlessly manage data across three pipeline tiers: Analytics Pipeline Tier (1.00): Real-time detection and correlation. Investigation Pipeline Tier (0.33): Enriched data for in-depth analysis. Basic Pipeline Tier (0.25): Long-term retention for compliance. 💡 Why It MattersWith DPM Flex Consumption, say goodbye to the dilemma of cost vs. threat

Simon Hunt has spent over three decades in the world of cybersecurity, helping people, companies, and entire industries stay one step ahead of the bad guys. A longtime CTO, CPO, and GM, he’s led global teams that turn big ideas into tools that actually make a difference. His personal mission — “stop criminals from getting rich” — keeps him grounded in purpose, whether he’s tackling data protection, payment security, or the latest wave of supply chain risks.Before joining Securonix as Chief Product Officer, where he helps enterprises and governments turn events into risk-reducing action, Simon spent time at Mastercard as EVP of Cybersecurity Innovation. There, he helped lead the acquisition of RiskRecon, giving the world a clearer picture of merchant security. Earlier, at McAfee/Intel, he served as CTO and launched the company’s smart home security division.These days, Simon also shares his experience with startups — advising teams that range from a cybersecurity education company helpi

Samer Alami is the Chief Customer Officer at Securonix, leading the teams that shape every part of the post-sales customer journey — from professional services and technical support to education and success. His mission: make sure every customer not only reaches value quickly, but keeps growing it over time.With more than three decades in the software world, Samer has built a career on creating strong, value-driven partnerships. Before joining Securonix, he led customer success at Exabeam, where he brought services and success together into a single, seamless experience — helping customers onboard faster, adopt deeper, and see results sooner. He’s also held senior leadership roles at Infoblox, Netskope, and A10 Networks, earning a reputation for developing high-performing global teams and raising the bar for what great customer experience looks like.Driven by the mantra “it can always be better,” Samer thrives on continuous improvement — whether it’s refining a process, empowering a te

ProblemWhen security operations grow — more data, more endpoints, more cloud services — many SIEMs struggle with performance, cost, or scalability. If you don’t understand the architecture of your platform, you’ll hit blind spots: bottlenecks, delayed hunts, limited historic search, or trapped data.ObjectiveGive you a clear view of how the Securonix platform is architected: how data flows from ingestion to analytics to search, how scale is achieved, what the underlying components are. With that understanding you can make better design, deployment and monitoring decisions.Platform Architecture: Key Building BlocksHere’s an overview of how the Securonix architecture is built to support modern security operations. Data Lake / Storage & Ingestion For the on-prem version, Securonix uses a Hadoop-based engine for storing raw and enriched events in a “Security Data Lake”. Securonix Documentation Data flows in from many sources (structured/unstructured), is processed and enriched (a

ProblemYour security stack is already diverse: firewalls, endpoints, identity systems, cloud services, threat-intel feeds. But if these tools don’t feed into your SIEM or speak to each other, you lose visibility, context and efficiency. Too often integrations are an afterthought—leading to gaps, manual stitching, and delayed detection.ObjectiveWalk you through how Securonix supports a broad set of integrations, what value you gain, and some concrete starting-points so you can plug in faster, play bigger, and reduce manual overhead.What Does “Integration” Really Mean in SecuronixIn this context, integration covers: Data ingestion/connectors – streaming or pulling logs, telemetry or enrichment data into Securonix. See the data-integration guide. Securonix Documentation+1 Third-party platform integrations – tools like cloud services, endpoint protection, identity management systems, and partner solutions that link into Securonix via API or connector frameworks. Action/response integra

ProblemYou’ve got a lot of moving parts: alerts, investigations, tickets, data flows. Manual hand-offs, tool silos and repeatable tasks are burning time, reducing scale and increasing risk. You want fast, connected workflows.ObjectiveShow how Securonix’s REST APIs and automation frameworks connect systems, reduce manual toil and let your SOC run leaner, faster, smarter.What’s Possible with Securonix APIs & Automation The documentation lists REST API categories such as Activity, Asset, Incident Management, Lookup, Risk History, Security Command Center, Whitelist/Watchlist, etc. Securonix Documentation+1 Key point: Auth first — you generate a token using the “Generate Token API”, then use that token for subsequent calls. Securonix Documentation+1 Sample use-cases: Pull all new violations via API and feed into a downstream system (ticket, SOAR, orchestration). Query telemetry or activity logs programmatically for external analytics or dashboards. Automate changes to wa

ProblemSecurity operations teams are swamped: alert fatigue is high, manual investigation workloads are growing, and finding the right balance between speed, accuracy and oversight has become tougher. Traditional SOC models struggle to scale.ObjectiveThis article helps you understand what Securonix AI Agents are, how they elevate detection/investigation/response workflows, and why you should care (even if “AI” feels like hype).What Are AI Agents?Securonix AI Agents are a modular suite of generative-AI-powered capabilities embedded into the Securonix platform. They’re built to assist detection engineers, SOC analysts, and security practitioners—automating parts of the workflow, providing natural-language interfaces, and speeding up threat lifecycle operations.Product page: https://www.securonix.com/products/agentic-ai/Documentation here: Securonix AI Agents – Documentation Securonix DocumentationKey Capabilities at a GlanceHere are some of the standout-features and how you might use the

ProblemMany organizations struggle to turn raw event or log data into meaningful insight quickly. Without ready-made reporting templates aligned to compliance requirements (e.g., GDPR, HIPAA, NIST), teams spend too much time building reports from scratch rather than acting on findings.ObjectiveShow you how to use the built-in Compliance Reports within Securonix to accelerate analytics, meet audit/detection needs and enable faster visibility—with minimal setup effort.Step-by-Step Solution Navigate to the Compliance Reports section In the Securonix UI, go to Menu → Reports → Compliance Reports. Open the documentation page: Compliance Reports – Securonix Documentation documentation.securonix.com This page lists many out-of-the-box report templates; each aligns to a regulation or audit framework. Browse the available templates You’ll find templates organized by frameworks such as: GDPR, HIPAA, NIST, PCI, ISO 27001, SOX, NERC. documentation.securonix.com Example: “GDP

ProblemWhen users experience unexpected behavior in the Securonix platform — such as pages not loading, buttons not responding, or intermittent errors — Support may request a HAR file to diagnose the issue.ObjectiveThis article explains when and how to capture a HAR (HTTP Archive) file from your browser to help the Support and Engineering teams troubleshoot platform issues efficiently.OverviewA HAR file records all network activity between your browser and the Securonix platform. It helps engineers: Understand what network requests are being sent and received. Identify where a request might be failing or delayed. Diagnose performance, connectivity, or authentication problems. Important: HAR files may contain sensitive information such as tokens or cookies. Only upload them securely through your support ticket—never share by email.When to Capture a HAR FileCapture a HAR file when: You experience loading issues, timeouts, or unexpected errors. A page fails to display or load data c

Audience: On-site System Engineers, Professional Services Consultants, and CTI PractitionersProduct Module: SNYPR Platform (On-Premises) and ThreatQ Threat Intelligence PlatformLast Updated: November 10, 2025KB ID: KB-20251110-snypr-threatq-enablementTags: on-prem, SNYPR, ThreatQ, enablement, deployment, upgrade, Hadoop, TIP, TDIR, CTI, training  Problem As organizations adopt hybrid defense models, teams must be fluent in both SNYPR on-prem operations and ThreatQ intelligence management. Without structured training, deployments and integrations can suffer from misconfigurations, scalability issues, or incomplete data alignment.  Objective This enablement hub provides guided learning for deploying, operating, and managing Securonix On-Prem SNYPR environments alongside the ThreatQ platform. Learners gain the knowledge and tools to ensure performance, security, and intelligence-driven automation across both systems.  Step-by-Step Solution 1. OverviewSNYPR and ThreatQ together form the fo

Why It MattersAt Securonix, we believe detections should do more than alert you — they should inform, prioritize, and predict. That’s the power of advanced detection analytics.Securonix Unified Defense SIEM applies analytics to log data in real time using a combination of behavioral analytics, threat modeling, and machine learning. The result: actionable detections that help security teams move faster, cut through alert fatigue, and focus on what truly matters — stopping threats before they spread.🔍 1. Unifying Rules, Behavior, and Threat ModelsOur analytics engine combines three layers of intelligence: Rule-based detection for defined conditions and compliance triggers. User and Entity Behavior Analytics (UEBA) for context-driven insights that highlight deviations from normal activity. Threat models that group related detections under a single, meaningful narrative aligned with MITRE ATT&CK. This unified approach turns isolated alerts into a complete story of what’s happening

Why This MattersDashboards aren’t just wall décor for your SOC. Done right, they’re early warning systems — the difference between seeing a storm coming and realizing you’re already drenched.Most people stop at “viewing data.” But Securonix dashboards can think with you — surfacing anomalies, tightening feedback loops, and showing what your defenses are really doing in real time.Let’s dig into what the documentation doesn’t say outright — how to turn dashboards into dynamic decision tools that actually make your team faster.🔍 1. Build Dashboards That Tell a StoryWhen you create a dashboard in Data Insights, don’t think “one pane of glass.” Think timeline of a breach you prevented.Start with a narrative flow: Top Row: situational awareness — overall incident counts, active threat models, recent policy changes. Middle: behavior shifts — failed logins by region, off-hours access, or new data egress paths. Bottom: validation — mean time to detect, resolved alerts, and false-positive r

What happens when a global financial powerhouse swaps clunky, on-prem tech for a cloud-native SIEM built for speed and smarts? Spoiler: an 80% faster detection rate and zero downtime.This case study dives into how one leading financial services organization—managing billions in assets—ditched manual upgrades and endless alerts for automation, analytics, and AI-driven precision. By adopting Securonix Unified Defense SIEM, they turned noise into insight and maintenance into momentum.Here’s a glimpse of the glow-up: ⚙️ Freed teams from upgrades and maintenance drudgery ⚡ 80% improvement in mean time to detect 📉 10% drop in incidents quarter-over-quarter 🧠 55% rise in true positive alerts ☁️ 99.98% uptime, zero downtime Their Head of Cyber and InfoSec put it best:“Securonix fits in perfectly with our cloud-first, SaaS-driven approach. It’s freed us up to focus on high-value security work rather than maintenance.”Ready to see how they did it?👉 Read the full story here