Subcategory · AI Citation Index
SIEM
Splunk and Microsoft dominate SIEM shortlists; Elastic and Rapid7 trail. SentinelOne surging +28 pts, Microsoft Defender dropping -16.
172 discovery queries · 261 head-to-heads · refreshed Jun 7, 2026
Discovery stage
The shortlist
Across 172 buyer-style "SIEM" queries
Splunk (splunk.com) appears in 50% of 172 shortlist prompts across three product slugs, with Microsoft Defender for Identity matching that rate. Rapid7 leads branded diversity with 5 models citing it, but trails Splunk and Microsoft in absolute shortlist frequency. Elastic appears 48% of the time, while LogRhythm SIEM lags at 23%.
Hover or click a logo to see brand details
Get weekly AI visibility changes for SIEM sent to your inbox.
Score shifts, new entrants, citation gaps — every Monday.
Signal by intent
By topic
Top 5 most-cited brands per intent cluster. Brands with zero citations in a topic are not shown.
Evaluation stage
Head-to-head
How often AI cites each brand across uniform category evaluation prompts · median 7/100
Splunk, Splunk Enterprise Security, and Microsoft Sentinel tie at 54 average evaluation score across 30 head-to-head queries. Elastic Security and Google Security Operations score 50 across 28 comparisons. Rapid7 scores only 34 across 19 queries, well below the SIEM category average of 38.
Hover or click a logo to see brand details
Each brand's score is the share of category evaluation prompts where AI cited them across all four engines — the same prompt pool for every brand. Brands above the median citation rate have stronger presence in evaluation-stage queries.
Brands to know
In this category
SentinelOne
SentinelOne scores 74 and posted a +28-point monthly surge, the sharpest rise in the SIEM dataset. AI models cite it despite lower shortlist frequency than incumbents.
Read brand profile →Elastic
Elastic hits 72 and appears in 48% of shortlists with 4-model consensus. Elastic Security scores 50 in evaluations, tied with Google Security Operations.
Read brand profile →Rapid7
Rapid7 earns 62 and leads in model diversity (5), appearing in 41% of shortlists. Its 34 evaluation score, however, trails Splunk and Microsoft by 20 points.
Read brand profile →Microsoft Defender for Identity
Microsoft Defender for Identity matches Splunk at 50% shortlist rate and 287 total mentions. It fell 16 points in recent trends, the category's steepest decline.
Read brand profile →LogRhythm SIEM
LogRhythm SIEM appears in 23% of shortlists with 5-model diversity but lacks an evaluation score. It trails Splunk, Microsoft, Elastic, and Rapid7 in AI visibility.
Read brand profile →Citation sources
Where AI pulls citations from
657 citations captured across SIEM prompt runs.
Vendor pages
319Product, help, and marketing pages from tracked vendors
Independent sources
248Reviews, encyclopedias, forums, press — not vendor-owned
Buyer questions
What AI cites for top SIEM questions
Most-cited prompts across the buyer journey. Click any prompt to see the actual URLs AI engines link to.
Discovery
Buyers exploring the categoryEvaluation
Buyers comparing optionsWant to know if AI cites your brand for SIEM?
Free audit. ChatGPT, Perplexity, Gemini, Claude.
Run an audit →