| Product-driven SIEM evaluation | Customer-driven: Our SIEM Evaluation Approach |
| Suggests a list of the main requirements (capabilities) that a powerful SIEM should have | Suggests a list of requirements with some specifications from a customer point of view |
| Has a flat approach when weighting the requirements | Can adopt weights to reflect more significant requirements |
| Uses quantitative evaluation | Uses both quantitative and qualitative evaluation |
| Evaluation is applied for general use cases | Evaluation is applied based on customer needs and context |
| Evaluates a product | Evaluate an overall solution: product, architecture, deployment, price, etc… |