Datadog Cloud SIEM
By Datadog
Security detection built into the Datadog observability platform, using logs that engineering teams already send for monitoring. Detection rules and investigations sit alongside Datadog's other monitors, which suits organizations where DevOps and security share the platform.
Verified Source: 1
- Product type
- Software
- Deployment
- SaaS
- Organization size
- SMBMid-marketEnterprise
- Pricing tier
- $$
Capability checklist
SIEMHow Datadog Cloud SIEM measures up against the full Security Information & Event Management taxonomy.
- Broad log ingestion — supported
- Collects and normalizes logs from network, endpoint, cloud, and SaaS sources.
- Correlation & detection rules — supported
- Turns raw events into alerts via built-in and custom detection logic.
- Fast historical search — supported
- Query months of data quickly during investigations.
- Behavior analytics (UEBA) — not supported
- Baselines user and entity behavior to flag anomalies.
- Dashboards & reporting — supported
- Compliance and operational reporting out of the box.
- Detection-as-code — not supported
- Manage detection rules in version control with CI.
Alternatives
Other Security Information & Event Management tools with overlapping capabilities, sized for similar teams.
Appears in stacks
Real-world stacks that include Datadog Cloud SIEM.