SIEMonster

SIEMonster started from a pentester’s complaint rather than a venture pitch deck. Its founders — Chris and Dez Rock, both with backgrounds in penetration testing and offensive security — built the product after Australian steelmaker BlueScope’s security team, whom they worked with on regular red-team engagements, described frustration with the cost and rigidity of commercial SIEM options. The two-year collaboration that followed produced a SIEM designed to watch not just servers, routers, and firewalls but also industrial control and SCADA equipment, an unusually broad remit for a SIEM built by a small independent vendor.

The product today is positioned as a multi-tenant, white-label SIEM aimed squarely at Managed Security Service Providers (MSSPs) and lean internal security teams, deployable inside a customer’s own AWS environment rather than as a shared multi-tenant cloud service. That deployment model appeals to MSSPs who want to resell a SIEM under their own brand without handing customer log data to a third-party cloud. SIEMonster has continued to iterate on the core product (a V5 release) and has more recently marketed EDG3, described as an autonomous AI SOC built on an edge-resident security lakehouse.

SIEMonster is a small operation — on the order of a dozen employees — and has not raised meaningful outside capital since a small round in 2018, meaning most of its development since then has been self-funded from product revenue. That is a meaningfully different profile from most SIEM/SOC vendors in this category, most of which are venture-backed and considerably larger. The BlueScope engagement remains the company’s most substantiated public case study; broader evidence of scale (customer counts, retention, or third-party detection benchmarking) is thin in public sources.