OpenText Enterprise Security Manager (ArcSight ESM)
OpenText Enterprise Security Manager (ArcSight ESM): Enterprise SIEM for large-scale correlation, ATT&CK analysis, and orchestrated response. Ranked #9 of 32 in Threat Hunting Software by our editors (6.5/10); pricing: Pricing on request; best for enterprise self-hosted correlation and response.
At a glance
- Editor score6.5 / 10
- PricingPricing on request
- Best forEnterprise self-hosted correlation and response
- Facts checked29 Sep 2026
Where it wins
- Real-time correlation and risk scoring prioritize threats at scale
- Native SOAR playbooks automate triage, investigation, and response
- ATT&CK mapping, threat intelligence, and custom dashboards support analysis
Where it doesn't
- Self-hosted deployment places infrastructure responsibility on the customer
- Pricing is handled through sales rather than a published plan
- Enterprise-focused capabilities may exceed smaller teams' requirements
Our verdict on OpenText Enterprise Security Manager (ArcSight ESM)
OpenText Enterprise Security Manager, also known as ArcSight ESM, is a self-hosted SIEM for enterprise security operations teams. It collects, normalizes, enriches, and analyzes events from diverse sources, including Windows events, APIs, firewall logs, syslog, NetFlow, and cloud data. Real-time correlation identifies threats, while event risk scoring helps teams prioritize response. The platform is aimed at organizations that need centralized detection and coordinated incident handling across large environments.
Pricing is handled through sales, with licensing based on ingestion capacity. ESM's main operational depth comes from its correlation and response workflow: teams can adjust correlation rules, create custom reports and dashboards, use a threat intelligence feed, and examine MITRE ATT&CK dashboards and mappings. Native SOAR adds playbooks, incident management, case timelines, and workflow automation for triage and response. Together, these features support a process that moves from event collection to prioritization, investigation, and action within one platform.
ESM fits environments that need broad telemetry coverage and extensibility. Custom connectors accommodate additional data sources, while support for cloud and network telemetry and built-in case management covers key security operations functions. Its self-hosted model can suit enterprises that want control over deployment, but it also places infrastructure responsibility on the customer. Smaller teams or organizations seeking a managed cloud service may prefer a narrower or differently deployed tool. Enterprises needing correlation, ATT&CK visibility, risk-based prioritization, and SOAR in one system should consider ESM; teams without those operational requirements may find its scope disproportionate.
OpenText Enterprise Security Manager (ArcSight ESM) pricing
OpenText Enterprise Security Manager (ArcSight ESM) fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Not verified |
| Hunting query language | Not verified |
| Endpoint telemetry | Not verified |
| Cloud telemetry | Yes |
| Network telemetry | Yes |
| Searchable retention | Not verified |
| Investigation cases | Yes |
| Deployment | Self-hosted |
| Compliance & security | GDPR, HIPAA, PCI DSS |
| Support | Live chat, Phone, Tickets, Community |
| Built for | Enterprise (editorial estimate) |
| Pricing | Pricing on request |
| Website | opentext.com |
| Facts checked | 29 Sep 2026 |
Alternatives to OpenText Enterprise Security Manager (ArcSight ESM)
- Elastic SecurityQuery-driven SIEM with broad integrations, detection rules, and case workflows.9.1
- Datadog Cloud SIEMA cloud-first SIEM with SQL detections, MITRE-mapped rules, UEBA, and AI investigations.9.0
- FortiSIEMA hybrid SIEM for teams that need IT/OT event correlation, investigation, and response.7.4
See all OpenText Enterprise Security Manager (ArcSight ESM) alternatives →
Used OpenText Enterprise Security Manager (ArcSight ESM)? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used OpenText Enterprise Security Manager (ArcSight ESM) for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
OpenText Enterprise Security Manager (ArcSight ESM) is listed in our Threat Hunting Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/opentext-enterprise-security-manager-arcsight-esm/"><img src="https://www.itechguides.com/best/badge/opentext-enterprise-security-manager-arcsight-esm.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Sep 2026
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. It never changes a score or a verdict. How we rank.
Last updated · How we research and update