ArcSight
ArcSight is an enterprise SIEM and SOAR platform providing security log analytics, threat detection, and incident response automation for large organizations. It now operates as a product line within OpenText's Cybersecurity Cloud portfolio following the 2023 acquisition of Micro Focus.
- Company typePrivate
- Founded2000
- HeadquartersPalo Alto, United States
- Headcount5,001–10,000
- GTM typeB2B
- OfferingSoftware
What ArcSight does
ArcSight is an enterprise security operations platform founded in 2000 and headquartered in Palo Alto, California, that provides Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) capabilities for large organizations. Its product set includes Enterprise Security Manager for threat detection and response, security log analytics with behavioral signal monitoring, and SOAR tooling for incident response automation. Originally a NASDAQ-listed independent company (ARST), ArcSight was acquired by Hewlett Packard in 2010, transferred to Micro Focus as part of the 2016 HPE Software spin-off, and is now part of OpenText's Cybersecurity Cloud portfolio following OpenText's 2023 acquisition of Micro Focus; the brand is currently listed at microfocus.com/opentext.com.
ArcSight primarily serves enterprise security operations centers, with secondary focus on government agencies and financial institutions, addressing use cases such as incident response automation, compliance monitoring, fraud detection, and threat correlation across hybrid infrastructure. The platform is distributed through OpenText's global enterprise field sales force, inside sales, channel/reseller partners, and cloud marketplaces (AWS, Google Cloud, Microsoft Azure), with flagship co-development partnerships with SAP, Microsoft, and Salesforce. Revenue is generated through a mix of traditional perpetual licensing with annual maintenance contracts and subscription/cloud services with tiered annual pricing, sold primarily on an enterprise quote basis tied to deployment size, user count, and module selection.
The competitive landscape includes Splunk SOAR, Palo Alto Networks Cortex XDR, Microsoft Sentinel, Tenable One, Swimlane, and SolarWinds, with ArcSight ranked among the top 8 SOAR platforms in Stellar Cyber's 2026 buyer's guide. The platform is being repositioned to address Agentic AI-driven autonomous threat investigation and Verdict-First architectures, while expanding into sovereign and private cloud deployments to serve regulated buyers.
ArcSight firmographics
Firmographics- Name
- ArcSight
- Website
- https://microfocus.com
- Company type
- Private
- Founded year
- 2000
- Headcount range
- 5,001–10,000 employees
- Short description
- ArcSight is an enterprise SIEM and SOAR platform providing security log analytics, threat detection, and incident response automation for large organizations. It now operates as a product line within OpenText's Cybersecurity Cloud portfolio following the 2023 acquisition of Micro Focus.
- Ownership category
- akta.pro rank
ArcSight industry classification
Industry- Product category
- Security Information and Event Management (SIEM) and SOAR
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- SIEM Platforms & Log Management (HDADAGAA)
- akta.pro secondary industries
- Security Analytics & Detection Engineering (HDADAGAE), Incident Response & Case Management (HDADAGAF), Cloud Security Logging, SIEM/SOAR & Threat Detection (HDABAHAL)
Keywords
Where ArcSight is headquartered
LocationHeadquarters
- HQ city
- Palo Alto
- HQ country
- United States
- HQ region
- North America
Markets served
ArcSight business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations
Revenue model
- Enterprise Software Licensing: Traditional enterprise software licensing model with perpetual licenses and annual maintenance/support contracts for ArcSight products. Sold primarily through enterprise sales motion to large organizations.
- Subscription/Cloud Services: Subscription-based access to OpenText Cybersecurity Cloud services including ArcSight capabilities delivered as SaaS, with flexible deployment options across public, private, and sovereign clouds.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise deployment with flexible licensing options |
| One time/ perpetual license | Multi-year contract | Traditional perpetual licensing model |
Go-to-market motion2 records
Distribution channels5 records
Marketing channels5 records
ArcSight product offering
Product offeringCore offering
ArcSight provides enterprise security information and event management (SIEM) and security orchestration, automation, and response (SOAR) capabilities as part of OpenText's Cybersecurity Cloud portfolio. The platform aggregates and correlates security events across enterprise infrastructure, automates incident response workflows, and delivers threat detection and behavioral analytics for large organizations.
Product overview
ArcSight is an enterprise security information and event management (SIEM) platform that was part of Micro Focus's cybersecurity portfolio. Following OpenText's 2023 acquisition of Micro Focus, ArcSight products are now integrated into OpenText's Cybersecurity Cloud offerings. The platform provides security operations capabilities including threat detection, log analytics, and security event management for enterprise organizations.
Differentiator
Problem solved
Functional benefit
Products and services
- ArcSight Enterprise Security Manager
Quantifiable outcome
- Implementation timelines have shortened significantly, with modern platforms delivering value in weeks rather than the 6-12 months required for legacy SOAR deployments.
Companies that use ArcSight
Customer profileSegments3 records
Ideal customer profiles3 records
ArcSight technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature4 records
ArcSight partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered core and flagship.
- Amazon Web Services (AWS)coreAWS is a public cloud partner for OpenText, enabling ArcSight deployments on AWS infrastructure. OpenText offers migration, optimization, and management services for information management solutions on AWS with joint go-to-market activities.
- Google CloudcoreGoogle Cloud serves as a strategic cloud partner for OpenText, providing the infrastructure foundation for ArcSight cloud deployments. OpenText optimizes performance and reduces costs with applications deployed on Google's globally scaled platform.
- Microsoft AzurecoreMicrosoft Azure is a strategic cloud partner enabling accelerated migration and modernization of ArcSight deployments in a highly secure and compliant public cloud environment. Joint sales and deployment support available.
- SAPflagshipSAP is a flagship enterprise application partner for OpenText. The partnership focuses on maximizing sustained growth, value, and innovation through intelligent enterprise solutions combining SAP applications with OpenText information management and security capabilities.
- MicrosoftflagshipMicrosoft is a flagship enterprise application partner connecting OpenText content to Microsoft business processes for better productivity and stronger governance. ArcSight integrates with Microsoft security ecosystem including Microsoft Sentinel and Azure security services.
- SalesforceflagshipSalesforce is an enterprise application partner optimizing Salesforce effectiveness by bringing together transactional data and unstructured content. Integration enables security and compliance use cases within CRM environments.
Scale indicators2 records
Recent moves1 record
Expansion highlights4 records
ArcSight competitors and assessment
Company assessmentMarket position
Strengths4 records
Weaknesses4 records
Competitive moat4 records
Key risks5 records
Key highlights6 records
Customer concentration
ArcSight social profiles
Digital presenceArcSight financial estimates
Financial estimateRevenue estimate
Valuation estimate
ArcSight leadership team
Management profileNumber of profiles
ArcSight funding detail
Funding detailFunding overview
Funding rounds4 records
Investors7 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ArcSight M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ArcSight
What does ArcSight do?
ArcSight provides enterprise security information and event management (SIEM) and security orchestration, automation, and response (SOAR) capabilities as part of OpenText's Cybersecurity Cloud portfolio. The platform aggregates and correlates security events across enterprise infrastructure, automates incident response workflows, and delivers threat detection and behavioral analytics for large organizations.
When was ArcSight founded?
ArcSight was founded in 2000. It employs 5,001 to 10,000 people.
Where is ArcSight based?
ArcSight is headquartered in Palo Alto, United States, in the North America region.
How does ArcSight make money?
Two revenue lines are on record. Enterprise Software Licensing is the primary driver. The others are subscription/Cloud Services.
Does ArcSight have an API?
No public API is recorded for ArcSight.
What industry is ArcSight in?
ArcSight's product category is Security Information and Event Management (SIEM) and SOAR. Its primary akta.pro industry code is HDADAGAA, SIEM Platforms & Log Management, with a secondary code of HDADAGAE, Security Analytics & Detection Engineering. Its NAICS code is 51821 and its SIC code is 7370.