Time to Contain

Exabeam announces new investigation capabilities and a modernised LogRhythm SIEM

Dated . Source: Exabeam press release, read

10-01month and day

What happened

Exabeam's press release of 2026-10-01 describes an AI investigator in its Nova product that gathers context and runs secondary searches as incidents unfold. The release says Exabeam's own security operations team measured an average case triaged in about 10 minutes, against about five hours for a human analyst (press release read 2026-11-05, vendor claim).

The figure is a triage time measured by the vendor on its own cases, with no sample size. The release also describes a modernised LogRhythm SIEM for on-premises use, with a migration from Elasticsearch to OpenSearch. It names no containment action.

What it changes for a buyer

Ten minutes to triage is not a time to contain, and the release gives no start or stop event for the clock. Exabeam's scorecard row, which rests on legacy Incident Responder pages last updated in 2022, is unchanged.

All notes are on the updates page. The scores on this site change only when a vendor-controlled page changes; see the corrections log.