OpenText ArcSight

ArcSight is OpenText’s enterprise SIEM (security information and event management) platform, built around a high-throughput correlation engine that ingests and normalizes log and event data from across an organization’s infrastructure to detect threats in real time. It originated as an independent company, was acquired by HP in 2010, passed through HP Enterprise’s spin-merger with Micro Focus in 2017, and landed at OpenText when it acquired Micro Focus for roughly $6 billion in 2023. ArcSight Intelligence, a companion UEBA (user and entity behavior analytics) module, layers unsupervised machine learning on top of the core SIEM to flag anomalous account and data-access behavior without requiring analysts to hand-write correlation rules.

The platform remains one of the longest-running SIEM products still in active enterprise use, which cuts both ways: it has a large installed base and deep integration ecosystem in industries like financial services, government, and healthcare, but it also competes against a wave of cloud-native SIEM and AI-SOC challengers that do not carry ArcSight’s on-premises-era architecture. OpenText has continued to invest in the product post-acquisition, marketing it alongside NetIQ (identity), Voltage (data protection), and Fortify (application security) as the four pillars of its Cybersecurity division.

For CISOs already running ArcSight, the case for staying is operational continuity and the depth of existing rule and content libraries; for net-new buyers, it competes on breadth of integration and behavioral analytics rather than modern cloud-native deployment simplicity.