Company name: HP
Product Name: ArcSight
Why we are watching: HP placed ArcSight (which always seems to score very well in public, competitive tests of SIEM products) in the Enterprise Security Product group, sharing office space with HP TippingPoint (an IPS) and HP Fortify and has been working to build close reporting ties between those products to make them collectively easier to use in large companies.
Company name: Q1 Labs, an IBM company
Product Name: QRadar
Why we are watching: IBM bought Q1Labs in 2011 and threw it into a newly formed security systems division, which kind of marked the end of IBM's own Tivoli SIEM. IBM has since added indexing and query improvements to support keyword search; improvements in event storage scalability; integration with IBM DAM and support for endpoint management, IPS firewall, and governance, risk and compliance technologies. IBM has announced a co-managed service option for QRadar for customers that want to combine an SIEM technology deployment with monitoring services from IBM.
Company name: McAfee
Product Name: McAfee Enterprise Security Manager
Why we are watching: Nitro Security was known for its advanced correlation engine which augments rule-based correlation with risk-based activity profiling. This product also gets really good performance grades in larger deployments. Late last year, McAfee rolled out a new version that allows it to pull in data from McAfee Global Threat Intelligence, risk data from McAfee Risk Advisor, and asset data from McAfee Vulnerability Manager and McAfee ePolicy Orchestrator.
Identity and access governance is the fasted growing segment of the identity management market. Sales in 2011 came in around $300 million. Analysts have not published the 2012 sales numbers yet, but they are expecting 35% to 40% growth. Specifically, IAG is the class of products that request, approve, certify and audit access to applications, data and other IT services.
Company name: Aveksa
Product Name: Access Governance Software Suite
Why we are watching: When the company reported its 2012 financials in January, it announced that 45% of its revenue was coming from brand new customers. In December, Aveksa launched Identity and Access Management 6.0, designed specifically to help enterprises fully scale their IAM initiatives and manage the Big Data that is now typically associated with IAM deployments. Shortly thereafter, Aveksa introduced MyAccess Live, a new Software-as-a-Service (SaaS) Identity and Access Management solution which provides integrated visibility and control of both cloud and on-premise applications in a single cloud-based solution.
Company name: Courion
Product Name: Access Assurance Suite and CourionLive
Why we are watching: The unique aspect of this product is that it was designed using a structured process so that it can integrate with other vendors' administration, analytics, workflow and reporting tools where its competitors and a redesigned connector architecture that lets customers easily integrate with other vendors' analytics, workflow and reporting tools.
Sign up for CIO Asia eNewsletters.