Lumu and SIEMs (Security Information and Event Management) are different technologies, designed with different purposes in mind. Lumu is a technology that was built from the ground up with a single objective: help measure and understand your unique compromise level in real time. Simply put, Lumu identifies confirmed compromises.

On the other hand, SIEMs are built to aggregate a wide range of event data and analyze it for security monitoring, long-term retention, compliance, forensic purposes, incident investigation, management, and reporting. Although SIEMs have evolved significantly in the last few years to include valuable features to expand its use cases, at its core, a SIEM remains a broad-focus security monitoring tool. As a result, a SIEM’s native correlation rules are not designed to look intentionally for compromises.

See how Lumu and SIEMs work together.