Logrhythm

LogRhythm, Inc. was a security intelligence software company headquartered in Boulder, Colorado, specializing in security information and event management (SIEM), log management, network monitoring, user behavior analytics and security analytics. Its products helped organizations collect and analyze log data in order to monitor, detect, investigate and respond to cybersecurity threats, and were delivered both as self-hosted deployments and as cloud-native platforms.

The LogRhythm SIEM product family includes the core SIEM with Client and Web Consoles, an Advanced Intelligence Engine for correlation and alarming, Data Processor and Data Indexer components, System Monitor agents, NetMon network monitoring, Open Collector, LogRhythm NDR (formerly MistNet), LogRhythm UEBA (formerly CloudAI), Echo, TrueIdentity and a threat intelligence service. Product releases continue on a quarterly cadence under version 7.x, with recent releases adding AIE events on Data Indexer dashboards, a refreshed threat map, and support for Windows Server 2025 and Rocky Linux 10.

Since the July 2024 merger with Exabeam, LogRhythm operates as part of Exabeam, where LogRhythm SIEM is positioned as the self-hosted platform alongside Exabeam's cloud-native New-Scale security operations platform, which centers on behavioral analytics, AI agents and threat detection, investigation and response (TDIR).

Founding story

LogRhythm was founded in 2003 by Chris Petersen, who served as chief technology officer, and Phillip Villella, chief scientist. The company began in Washington, D.C. as Security Conscious, Inc., rebranding to LogRhythm and relocating to Boulder, Colorado in 2005. The founders focused on analyzing log data to identify potential security breaches, arguing that growing connectivity and reliance on technology were increasing exposure to cyberattacks.

Business model

LogRhythm sold security information and event management software to enterprise and public-sector organizations, offered in self-hosted/on-premises form as well as a cloud-delivered SaaS option (LogRhythm Cloud, launched 2019) and the cloud-native Axon platform (2022). The company maintained a direct US sales force alongside international operations. Following the 2024 merger, the LogRhythm SIEM product line continues to be sold and maintained as the self-hosted platform within Exabeam's portfolio.

Software licensing and subscription for SIEM, log management and related security analytics products, including licensed self-hosted deployments and SaaS/cloud offerings, with professional services, customer success and renewals functions.

Traction

By December 2011 LogRhythm reported more than 600 log management and SIEM customers and roughly 150 employees across the US, UK and Hong Kong, about 90 of them in Boulder, after raising $10 million earlier that year. The product line remains actively developed, with documented quarterly releases through 2026.

Latest developments

LogRhythm SIEM continues under Exabeam with quarterly releases; the 7.25.0 general availability release was dated 1 July 2026, followed by a 7.25.0.1067 release in August 2026. Recent LogRhythm SIEM updates include surfacing Advanced Intelligence Engine events directly in Data Indexer dashboards, a refreshed real-time threat map, support for Windows Server 2025 and Rocky Linux 10, and a Linux System Monitor Agent with near feature parity to the Windows agent. On the cloud-native side, Exabeam has added Agent Behavior Analytics detections, Anthropic Claude observability, the Nova Rule Creator, and OWASP Agentic Top 10 coverage mapping.