- Home
- SIEM Software
- MaxPatrol SIEM
MaxPatrol SIEM
Moscow, Russia
What it is
MaxPatrol SIEM provides visibility into IT infrastructure and helps security teams detect incidents. It collects data actively and passively from more than 300 types of systems, and alerts operators to unavailable sources, unusual event distributions, or delays in event data. Users can choose among 20 default dashboard widgets or create their own. A visual rule constructor supports detection-rule creation without coding or learning a rule language. The product maps network topology and updates it as infrastructure changes. Its Behavioral Anomaly Detection module uses 49 machine-learning models to identify targeted attacks and previously unknown anomalies. Expertise packs supply detection rules, updated collection and incident-handling parameters, response recommendations, and reputation lists. MaxPatrol SIEM uses PDQL and supports real-time alerting, custom rules, and authenticated scans. MaxPatrol NAD Sensor analyzes network traffic, gathers asset data, and detects attacks. The product is paid, with pricing available on request, and the vendor invites organizations to request a pilot. It supports self-hosted deployment, with Linux and specified Windows Server components listed.
For and against
For
- Collects data from more than 300 types of systems.
- Includes 20 default dashboard widgets and custom dashboards.
- Visual rule constructor supports rule creation without coding.
- Behavioral module uses 49 machine-learning models.
- Supports real-time alerting and authenticated scans.
Against
- Pricing is available on request.
- Displaying asset vulnerability information requires a separate license.
- Warranty support is tied to valid licenses during the update access period.
The verdict
MaxPatrol SIEM combines broad data collection, configurable detection rules, and behavioral anomaly detection for infrastructure security teams. Pricing is by consultation, and the product page invites organizations to request a pilot.
Who it suits
It suits security teams seeking infrastructure visibility and incident detection across varied systems. Organizations considering self-hosted SIEM software can request a pilot and pricing from the vendor.
Plans and prices
MaxPatrol SIEM
Pricing by consultation; vendor offers a pilot
Read 9 Oct 2026 · global.ptsecurity.com
On the record
- Asset visibility
- Maintains asset history including installed software, events, vulnerabilities, configuration, and topology.global.ptsecurity.com · read 9 Oct 2026
- Behavioral detection
- Its Behavioral Anomaly Detection module uses 49 machine-learning models to detect targeted attacks and previously unknown anomalies.global.ptsecurity.com · read 9 Oct 2026
- Dashboards
- Users can choose from 20 default dashboard widgets or create their own.global.ptsecurity.com · read 9 Oct 2026
- Data collection
- It collects data actively and passively from more than 300 types of systems.global.ptsecurity.com · read 9 Oct 2026
- Data sources
- Collects data actively and passively from over 300 types of systems.global.ptsecurity.com · read 9 Oct 2026
- Deployment
- The help portal lists Linux distributions including Astra Linux Special Edition 1.7 and Debian 10, and supports some components on specified Windows Server versions.help.ptsecurity.com · read 9 Oct 2026
- Integration limit
- Displaying asset vulnerability information requires a MaxPatrol Vulnerability Management license, according to the vendor's version 6.1 release notes.global.ptsecurity.com · read 9 Oct 2026
- Integrations
- The product page describes MaxPatrol NAD Sensor as a component that analyzes network traffic, collects asset data, and detects attacks.global.ptsecurity.com · read 9 Oct 2026
- Intended users
- The maker describes the product as helping security staff gain infrastructure visibility and detect incidents across IT infrastructure.global.ptsecurity.com · read 9 Oct 2026
- Network analysis
- The MaxPatrol NAD Sensor analyzes network traffic, passively collects asset data, and detects attacks including attempts to contact command-and-control servers.global.ptsecurity.com · read 9 Oct 2026
- Network visibility
- The product maps network topology automatically and updates it as the network changes.global.ptsecurity.com · read 9 Oct 2026
- Pilot
- The product page invites organizations to request a pilot; the vendor's 2021 release announcement describes the pilot as free.global.ptsecurity.com · read 9 Oct 2026
- Purpose
- MaxPatrol SIEM provides visibility into infrastructure and detects security incidents.global.ptsecurity.com · read 9 Oct 2026
- Rule creation
- A visual rule constructor lets users create incident detection rules without learning a language or writing code.global.ptsecurity.com · read 9 Oct 2026
- Source monitoring
- Operators are alerted to unavailable data sources, event-distribution anomalies, or delays in event data.global.ptsecurity.com · read 9 Oct 2026
- Support
- Positive Technologies says warranty support for valid product licenses is available during the update access period.help.ptsecurity.com · read 9 Oct 2026
- Threat detection
- Its BAD module uses 49 machine-learning models and can independently detect targeted attacks and previously unknown anomalies.global.ptsecurity.com · read 9 Oct 2026
- Threat intelligence
- Expertise packs include detection rules, collection and incident-handling parameters, response recommendations, and reputation lists.global.ptsecurity.com · read 9 Oct 2026
