AlienVault Review, Pricing & Features

AlienVault is now part of LevelBlue, the AT&T-linked cybersecurity firm. Learn the history, USM and OSSIM products, and current branding for 2026.

Category
Security
Pricing
custom
Verified
Not yet
Last updated
July 19, 2026
Founded
2007
Headquarters
Dallas, Texas, United States (LevelBlue)

What Is AlienVault

AlienVault was a cybersecurity company founded in 2007, built around the open-source OSSIM SIEM project, that developed the commercial Unified Security Management (USM) platform combining SIEM, intrusion detection, vulnerability scanning, and asset discovery in one product.

AT&T Communications acquired AlienVault in 2018, rebranding it as AT&T Cybersecurity, and in May 2024 AT&T spun the business off into LevelBlue, a standalone joint venture with WillJam Ventures, headquartered in Dallas, Texas.

As of 2026, the AlienVault name is a legacy brand: its products, customer relationships, and threat intelligence operations now run under LevelBlue, and the free OSSIM tool was formally retired at the end of 2024.

Key Features

The former AlienVault, now LevelBlue's core commercial platform, USM Anywhere, is a cloud-native SIEM and open XDR system that unifies log collection, threat detection, vulnerability assessment, and incident response in one console.

It draws on the Open Threat Exchange (OTX), a crowdsourced threat intelligence community originally built by AlienVault, to enrich detections with up-to-date indicators of compromise contributed by a global security community.

LevelBlue supplements the technology platform with managed detection and response (MDR), 24/7 security operations center (SOC) support, and cybersecurity consulting services, positioning it as a full-service managed security provider rather than a standalone software vendor.

Pricing

Pricing for USM Anywhere and LevelBlue's managed cybersecurity services is not published publicly and is quoted on a custom, per-organization basis, typical for enterprise security and managed detection and response contracts.

The free, open-source OSSIM product that AlienVault originally offered has been officially retired since December 31, 2024, and no longer receives updates or support, so it is no longer a free entry point into the ecosystem.

Key Features

Pros & Cons

Pros

  • Long history and deep threat intelligence data via the Open Threat Exchange community
  • Combines SIEM, XDR, vulnerability management, and MDR under one vendor
  • Backed by a large, well-resourced organization (LevelBlue, formerly AT&T Cybersecurity)
  • Established enterprise and mid-market customer base with proven managed security track record
  • Options for both self-managed software and fully managed security services

Cons

  • Confusing brand history across AlienVault, AT&T Cybersecurity, and LevelBlue can make current positioning hard to research
  • The free, open-source OSSIM product has been retired, removing a former no-cost entry point
  • Pricing is not public and requires a custom sales quote, which can slow evaluation
  • As with most enterprise SIEM/XDR platforms, deployment and tuning can require significant security expertise
  • Users researching 'AlienVault' online may land on outdated information given the multiple rebrands

Frequently Asked Questions

Is AlienVault still a company?

Not as an independent company. AlienVault was acquired by AT&T in 2018, rebranded AT&T Cybersecurity, and in May 2024 its business became part of LevelBlue, a standalone joint venture between AT&T and WillJam Ventures.

What happened to OSSIM?

OSSIM, the free open-source SIEM AlienVault was built on, was officially retired by LevelBlue at the end of December 2024, ending updates, maintenance, and security patches.

What is USM Anywhere?

USM Anywhere is the cloud-native SIEM and open XDR platform that evolved from AlienVault's original Unified Security Management product, now sold under LevelBlue.

Who owns LevelBlue?

LevelBlue is a joint venture between AT&T, which holds a minority stake and board seat, and private equity firm WillJam Ventures, which holds the majority stake.

Where is LevelBlue headquartered?

LevelBlue is headquartered in Dallas, Texas, and employs over 1,000 people across roughly 10 countries.

Is AlienVault's software still free?

No. The free OSSIM product is retired; the current commercial platform, USM Anywhere, and LevelBlue's managed services are sold under custom enterprise pricing.

What is the Open Threat Exchange (OTX)?

OTX is a crowdsourced threat intelligence sharing platform originally built by AlienVault, still used to enrich detections in LevelBlue's current products.

When was AlienVault founded?

AlienVault was founded in 2007, building on the open-source OSSIM project that began in 2003.

Related Tools