Subcategory · AI Citation Index
SIEM
Splunk and Microsoft dominate SIEM shortlists, but Elastic and SentinelOne show stronger momentum in head-to-head evaluations.
172 discovery queries · 261 head-to-heads · refreshed Jun 14, 2026
Discovery stage
The shortlist
Across 172 buyer-style "SIEM" queries
Splunk variants (splunk.com, Splunk Enterprise Security, Splunk Cloud Platform) appear in 86, 85, and 41 shortlists respectively out of 172 total prompts, claiming the top three positions by shortlist rate. Microsoft Defender for Identity matches that 86-appearance ceiling with a 50% shortlist rate. Rapid7 lands on 71 shortlists (41.3%) across five AI models, while Elastic shows three distinct entries totaling 174 combined shortlist appearances.
Hover or click a logo to see brand details
Get weekly AI visibility changes for SIEM sent to your inbox.
Score shifts, new entrants, citation gaps — every Monday.
Signal by intent
By topic
Top 5 most-cited brands per intent cluster. Brands with zero citations in a topic are not shown.
Evaluation stage
Head-to-head
How often AI cites each brand across uniform category evaluation prompts · median 7/100
Splunk, Microsoft Sentinel, and Splunk Enterprise Security tie at 54-point average evaluation scores across 30 comparison queries each—the category's joint leaders. Elastic Security and Google Security Operations follow at 50 points over 28 queries. Rapid7, despite dominating shortlist volume, scores only 34 points in direct evaluations across 19 comparison queries, trailing Sumo Logic's 39.
Hover or click a logo to see brand details
Each brand's score is the share of category evaluation prompts where AI cited them across all four engines — the same prompt pool for every brand. Brands above the median citation rate have stronger presence in evaluation-stage queries.
Brands to know
In this category
SentinelOne
74-point score and 28-point monthly delta mark the sharpest upward move in the category. Rising momentum contradicts its absence from top-10 shortlist positions, signaling emerging AI model preference.
Read brand profile →Elastic
72-point featured score with three entries totaling 174 shortlist appearances and 310 mentions across four models. Evaluation data shows Elastic Security at 50 points over 28 queries, outpacing Rapid7 and Sumo Logic despite lower shortlist frequency.
Read brand profile →Rapid7
Highest shortlist rate at 41.3% (71 appearances, 151 mentions, five-model diversity) but evaluation score lags at 34 across 19 comparison queries. Volume leader without evaluation dominance.
Read brand profile →Microsoft Defender for Identity
86 shortlist appearances and 287 total mentions, tied for highest frequency. 58-point score dropped 16 points month-over-month, the steepest decline in the category despite sustained shortlist presence.
Read brand profile →LogRhythm SIEM
39 shortlist appearances (22.7% rate) with 122 mentions across five models, yet no evaluation score on record. Consistent shortlist inclusion without documented head-to-head performance data.
Read brand profile →Citation sources
Where AI pulls citations from
657 citations captured across SIEM prompt runs.
Vendor pages
319Product, help, and marketing pages from tracked vendors
Independent sources
248Reviews, encyclopedias, forums, press — not vendor-owned
Buyer questions
What AI cites for top SIEM questions
Most-cited prompts across the buyer journey. Click any prompt to see the actual URLs AI engines link to.
Discovery
Buyers exploring the categoryEvaluation
Buyers comparing optionsWant to know if AI cites your brand for SIEM?
Free audit. ChatGPT, Perplexity, Gemini, Claude.
Run an audit →