October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
AI investigations

Can Exabeam Run AI-Assisted Security Investigations On-Premises?

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Not on the evidence Exabeam currently publishes. Exabeam describes its New-Scale platform and its AI-assisted investigations as cloud-based. Its on-premises LogRhythm SIEM is a separate offering, and public materials do not establish that New-Scale’s AI investigations—or equivalent AI processing—can run entirely within a customer’s environment.

What “on-premises” means for Exabeam

There are two distinct questions: where logs are collected and where they are sent for storage and analysis. A collector running inside your network does not, by itself, mean the SIEM or its AI processing runs there.

Exabeam describes New-Scale Fusion as a cloud-native platform combining New-Scale SIEM and New-Scale Analytics. Its capabilities include log management, behavioral analytics, risk scoring, investigation workflows and Nova agents, along with vendor-described AI assistance for rule creation, tuning, conversion and investigations. These are Exabeam’s product descriptions, not independent performance findings. Exabeam’s platform overview

For New-Scale, Exabeam says site collectors can be deployed as virtual machines behind customer firewalls. They use SSL to forward encrypted data to Exabeam’s service. That supports local collection and encrypted transport; it does not establish that subsequent storage, analytics or AI inference stays on-premises. Exabeam’s deployment options

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Where New-Scale AI processing takes place

In a white paper dated September 16, 2025, Exabeam says New-Scale Analytics operates on Google Cloud Platform and uses Google Gemini LLMs. The paper also says retrieved data is ephemeral and evaluated in memory without storage, caching or retention, and that model processing takes place in a designated geographic region whenever possible. Those are vendor statements about its cloud service—not evidence of a fully local New-Scale deployment. Exabeam, A CISO’s Guide to the New Era of Agentic AI

For an organization whose policy requires all security data and inference to remain inside its own environment, the public descriptions do not confirm that New-Scale meets that requirement. Encrypted transmission, regional processing and claims about ephemeral handling are different controls from keeping processing on customer premises.

What Exabeam offers for on-premises SIEM

Exabeam’s current SIEM page describes LogRhythm SIEM as an exclusively on-premises offering, deployed in a customer’s infrastructure or by an external partner. It says data transportation for this product occurs within the secured environment. This is a distinct product and deployment model, not an on-premises edition of New-Scale. Exabeam’s SIEM overview

The same page describes AI-driven analytics through LogRhythm Intelligence as an add-on, but does not specify its inference architecture or establish feature parity with New-Scale Nova. Do not assume that choosing on-premises LogRhythm provides the same AI-assisted investigation capabilities, workflows or data handling as New-Scale; request product- and deployment-specific details from Exabeam.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

New-Scale and LogRhythm: the practical distinction

Question New-Scale Fusion / Analytics LogRhythm SIEM
Deployment described by Exabeam Cloud-native platform. Exabeam platform overview Exclusively on-premises SIEM offering. Exabeam SIEM overview
Local collection or deployment Collectors can run behind customer firewalls, then forward encrypted data to Exabeam’s service using SSL. Exabeam deployment options Deployed in customer infrastructure or by an external partner, according to Exabeam. Exabeam SIEM overview
AI processing described publicly Exabeam’s 2025 white paper places New-Scale Analytics on Google Cloud Platform and identifies Google Gemini LLMs. 2025 white paper LogRhythm Intelligence is described as an AI-driven analytics add-on; its exact inference architecture is not stated on the cited SIEM page. Exabeam SIEM overview
New-Scale feature parity established? Not applicable. Not stated by Exabeam on the cited SIEM page.

The comparison is limited to Exabeam’s public descriptions; it does not establish exact licensing, feature parity, implementation needs or contractual data-handling terms for a particular customer.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Questions to resolve before selecting a deployment

If your security or compliance requirement says data must stay on-premises, get written answers tied to the exact product, SKU and architecture you would buy. Ask Exabeam to distinguish log collection, transport, storage, analytics and AI inference rather than treating “on-premises” as a single property.

  • Data flow: Which event data, prompts, retrieved records, investigation outputs and metadata leave your network, and at what stage?
  • Processing location: Where are analytics and model inference executed? Can any part of the workflow be disabled or isolated if external processing is prohibited?
  • Storage and retention: Where are logs and derived data stored, for how long, and under what contractual deletion and retention terms?
  • Residency: Which regions are available for your deployment, and what does “whenever possible” mean for region selection and exceptions?
  • Product equivalence: Which specific AI-assisted investigation features are available in LogRhythm Intelligence, and how do they differ from New-Scale Nova?
  • Operations and responsibility: Who deploys and maintains the components, and which party controls transport, access, upgrades and incident response?

Exabeam’s public deployment page advertises “over 3,000 customer deployments” but gives no publication date for that figure. It is a vendor-stated count, not an independently verified, year-specific measure, and does not answer where a particular customer’s data or AI processing runs. Exabeam’s deployment options

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Read next

Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.