SECURITY ATLAS / EVALUATION BRIEF
Exabeam New-Scale / LogRhythm SIEM
Research reviewed: 2026-10-18
https://atlasofsecurity.com/landscape/vendors/exabeam-logrhythm-siem/

THE ATLAS TAKE
Atlas judgment: This catalog entry spans a portfolio boundary that buyers must resolve before comparing features. Exabeam New-Scale SIEM is cloud-delivered, while LogRhythm SIEM remains a self-hosted offering; the corporate merger does not make them one interchangeable deployment. New-Scale’s normalized search and investigation workflows warrant a hands-on data-fidelity test, while an existing LogRhythm estate needs a concrete enhancement or migration proposal. Demand the exact product, analytics modules and hosting model in writing, then compare the operating burden and evidence continuity of that scoped proposal rather than awarding the combined portfolio every capability.

SCOPE
This portfolio page deliberately distinguishes the offerings rather than treating their names as interchangeable editions of one installation. Merger history does not prove that integrations, licenses or migration paths are identical.

WORTH A LOOK WHEN
Teams deliberately choosing between Exabeam cloud analytics and a maintained self-hosted LogRhythm operating model.

THINK TWICE WHEN
A proposal treats New-Scale and LogRhythm as feature-identical or assumes the merger itself requires retirement.

IMPLEMENTATION
1. Name the exact target
Specify New-Scale SIEM, analytics additions or LogRhythm in the bill of materials and architecture.

2. Validate source and use-case coverage
Check required fields, identifiers and time windows against the product actually being deployed.

3. Protect historical continuity
Test access to old cases and retained events before changing collection routes or decommissioning infrastructure.

OPERATING REALITY
Cloud delivery shifts infrastructure duties, while self-hosting retains sizing, upgrades and recovery obligations. Both routes need collection and detection stewardship. Atlas would compare the actual analyst workflow and historical-data access in each proposal, including any period when cloud analytics and the existing SIEM operate together.

COMMERCIAL CONSIDERATIONS
Request a product-specific quote; do not combine cloud consumption assumptions with self-hosted capacity or unlicensed portfolio features.
- Chosen SIEM and analytics module scope
- Cloud consumption or self-hosted capacity and retention
- Migration, integration and support services

EVALUATION PLAN / PROPOSED TESTS, NOT COMPLETED RESULTS
1. Check product boundary claims
Acceptance evidence: Complete the same detection and case story in the proposed deployment and list every additional module used.
Owner: __________  Pass criterion: __________
Observed result: __________  Evidence location: __________

2. Validate normalized identity
Acceptance evidence: Replay two fictional accounts with similar names and prove their events do not merge into a misleading timeline.
Owner: __________  Pass criterion: __________
Observed result: __________  Evidence location: __________

3. Prove continuity through change
Acceptance evidence: Export a case and locate older events during a simulated cutover, recording permissions and any missing historical context.
Owner: __________  Pass criterion: __________
Observed result: __________  Evidence location: __________

QUESTIONS FOR THE VENDOR
- Which product, edition and deployment model is the proposal actually describing?
- How are entity baselines explained, reset and maintained when accounts or roles change?
- What evidence, detections and historical data can be carried through an upgrade or migration?

EVIDENCE GAPS
- No independent comparative analytics or migration benchmark was conducted.
- Confirm current packaging, product-specific retention and the availability of every advertised AI or cross-portfolio feature.

SOURCES
Exabeam New-Scale SIEM (Product information)
https://www.exabeam.com/platform/new-scale-siem/
LogRhythm SIEM (Product information)
https://www.exabeam.com/platform/logrhythm-siem/
Exabeam and LogRhythm merger and continued offerings (Lifecycle)
https://www.exabeam.com/press-releases/exabeam-and-logrhythm-complete-merger-and-announce-new-company-details/

Use synthetic fixtures in an authorized environment. Agree rollback and acceptance criteria before enforcement.
Documentation research and Atlas analysis. Independent hands-on effectiveness, effort, and complete price remain unassessed.