Overview

Nuspire’s Cloud SIEM (nuSIEM) was developed for the challenges of log collection and analysis from highly distributed security devices, applications, and systems – including public / private cloud, remote data centers and office locations, with the functionality of a managed SIEM solution without the cost and complexity of an on premises, in-house SIEM. nuSIEM is able to process both cloud and on premise security logs as they were one, due to its advanced architecture.

NuSIEM utilizes a clustered distributed, parallel processing cloud, combining high speed, real-time analysis of security and system events with Intelligent Alerting and Dynamic Drill Down Reporting. This big data technology allows for the quick access, aggregation, and correlation of billions of data points. This is all done without the need to deploy hardware at the customer sites. Customers are alerted on security events across their vast networks in real time. The nuSIEM service also allows organizations to correlate events from devices located at HQ, branch offices, retail locations, and public/private clouds instantly.

The Nuspire Cloud SIEM is built to be infinitely scalable through its clustered cloud processing design. Because the solution is built for making vast amounts of data easily accessible through its high speed design – nuSIEM does not fold under the pressure of billions of events per day as can be found with other appliance or software based solutions.

As part of the service, the Nuspire Security Analytics Team (SAT) is constantly strengthening the solution with new analytics that can be applied to catch emerging threats. Every day, hundreds to thousands of new rules are added to the system based on threat intelligence and research performed by the SAT.