Not according to Exabeam’s published materials reviewed here. Exabeam describes New-Scale Fusion and New-Scale Analytics as cloud-native, and its 2025 white paper places New-Scale Analytics’ AI processing on Google Cloud Platform using Google Gemini. Exabeam does offer an on-premises SIEM—LogRhythm SIEM—but that is a separate product, and the available public information does not establish that it provides the same AI-assisted investigations as New-Scale.
Can Exabeam’s AI-assisted investigations run entirely on-premises?
Exabeam’s public product descriptions do not establish an option to run New-Scale’s AI-assisted investigations with all processing and data kept inside a customer’s own environment. New-Scale Fusion is described as a cloud-native platform combining New-Scale SIEM and New-Scale Analytics. Its listed capabilities include investigation workflows and AI-driven investigation, as well as AI-assisted rule creation, tuning, and conversion.
In a white paper dated September 16, 2025, Exabeam says New-Scale Analytics operates on Google Cloud Platform (GCP) and uses Google Gemini large language models. The paper also describes retrieved data as ephemeral, with evaluation performed in memory without storage, caching, or retention, and says model processing takes place in a designated geographic region whenever possible. These are Exabeam’s descriptions of its service; they indicate cloud processing, not a fully local New-Scale AI deployment.
Does using on-premises collectors keep SIEM data on-premises?
No. An on-premises collector describes where data collection begins, not where the service’s downstream storage, analytics, or AI processing takes place. Exabeam says New-Scale collectors can run as virtual machines behind a customer’s firewall and use SSL to forward encrypted data to Exabeam. That arrangement still sends data to the cloud service.
Recommended Free Tools
#1 Best Overall
Organizations evaluating this setup should distinguish among collection, transport, storage, analytics, and AI inference. A collector inside the network does not, by itself, satisfy a requirement that logs or processing remain there. Confirm the data flow for the exact product, configuration, and contract under consideration.
Which Exabeam offering is on-premises?
Exabeam’s current SIEM product page describes LogRhythm SIEM as exclusively available as an on-premises solution, deployed in a customer’s infrastructure or by an external partner. It says data transportation for that product occurs within the secured environment. The page also describes LogRhythm Intelligence as an add-on for AI-driven analytics, but the reviewed public information does not specify its exact inference architecture or establish feature parity with New-Scale Nova.
Rank #2
LogRhythm SIEM and New-Scale should not be treated as interchangeable deployment modes of the same platform. Exabeam describes New-Scale as cloud-native and LogRhythm SIEM as its on-premises offering; public materials reviewed here do not provide a complete comparison of their features, licensing, or operating requirements.
How the two deployment paths differ
| Question | New-Scale Fusion / Analytics | LogRhythm SIEM |
|---|---|---|
| Deployment described by Exabeam | Cloud-native platform and analytics service. | Exclusively on-premises, in the customer’s infrastructure or deployed by an external partner. |
| Data path described publicly | On-premises collectors can forward encrypted data to Exabeam’s cloud service. | Exabeam says data transportation occurs within the secured environment. |
| AI information available | Exabeam lists AI-assisted rule work and AI-driven investigation; its 2025 white paper places AI processing on GCP and says it uses Gemini. | Exabeam describes LogRhythm Intelligence as an add-on for AI-driven analytics; the precise inference architecture and parity with New-Scale Nova are not established in the reviewed public material. |
| What the public description does not settle | Whether a deployment can keep all data and AI processing on-premises; exact contractual handling and configuration details. | Whether specific AI investigations can run locally, and how its features compare with New-Scale. |
What to verify before choosing
If your policy says security data cannot leave your environment, ask Exabeam to confirm the architecture for the specific SKU and deployment—not just whether a collector can be installed locally. Get the answers in writing and align them with your legal, privacy, and compliance requirements.
- Data flow: Which log fields, derived data, prompts, investigation context, and outputs leave the customer environment, and when?
- Processing and storage: Where are analytics and AI inference performed? What data is stored, for how long, and what does “ephemeral” mean for the specific service and contract?
- Residency and controls: Which geographic regions are available, what determines the processing region, and what controls or commitments apply?
- Product and feature scope: Which investigation and AI functions are included in the proposed offering, and do they require cloud connectivity or an add-on?
- Deployment responsibilities: Who operates the infrastructure and collectors, and what network connections are required?
Public descriptions reviewed here distinguish a cloud-native New-Scale service from on-premises LogRhythm SIEM, but they do not settle deployment-specific licensing, feature parity, or contractual data handling. Those details need confirmation from Exabeam for your proposed configuration.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
