Modernize your SOC with OpenText Enterprise Security Manager Next Generation

1. Your SIEM should evolve with the threats

Cyber threats are evolving faster than many security operations centers (SOCs) can adapt. Attackers are adopting AI-driven techniques, alert volumes keep rising, and experienced analysts are stretched thin. For SOC teams, the challenge is to identify and investigate meaningful signals without adding operational complexity. For security leaders, it is to build a resilient, efficient security program while protecting existing technology investments.

OpenText™ Enterprise Security Manager has long supported real-time threat correlation and detection. Now OpenText Enterprise Security Manager Next Generation offers a way to modernize that foundation. It combines trusted detection capabilities with a Kubernetes-based architecture, an updated analyst experience, and native security orchestration, automation, and response (SOAR). The objective is not to discard what your team knows. It is to make those capabilities more adaptable to today’s security operations needs.

2. Modern architecture, less operational friction

Enterprise Security Manager Next Generation introduces a fully containerized, “Run Anywhere” architecture built on Kubernetes. This can simplify deployment, support scalability, and give organizations greater flexibility as their infrastructure changes. For executives evaluating the SIEM roadmap, the architecture provides a way to align security operations with broader modernization initiatives.

For analysts and administrators, the experience matters just as much as the underlying technology. A modern web interface, interactive dashboards, improved MITRE ATT&CK reporting, and web-based content development help put detection work in a more accessible workflow. A simplified rule creation wizard supports the creation and editing of detection rules, while streamlined certificate management and deployment can help reduce administrative overhead.

Enterprise Security Manager Next Generation also includes native SOAR, with pre-built and customizable playbooks that can automate repetitive steps and orchestrate incident response. These native SOAR capabilities are available without additional licensing costs. That means teams can explore response automation while continuing to build on their Enterprise Security Manager investment.

3. Preserve detection knowledge while planning migration

SIEM modernization is not only a technology decision. Detection rules, tested operational processes, and analyst expertise represent years of institutional knowledge. Enterprise Security Manager Next Generation lets organizations export and import existing Enterprise Security Manager 7.x content so teams can reuse valuable detection content rather than recreate everything from scratch.

There is an important planning distinction: because Enterprise Security Manager Next Generation uses a containerized architecture, an in-place upgrade is not supported. Organizations should plan a migration rather than assume a conventional version upgrade. OpenText offers upgrade support and professional services to help with that transition.

Timing also matters. Enterprise Security Manager 7.9 is planned to receive security patches until its sunset in 2029 but will not receive new features or capabilities. For security leaders, this creates an opportunity to plan deliberately: assess current deployments, inventory critical detection content, and evaluate how the next-generation architecture fits long-term SOC priorities.

4. Look beyond Enterprise Security Manager to the broader SIEM platform

Enterprise Security Manager Next Generation is one part of the modernization story. The broader OpenText SIEM platform brings together detection, investigation, and response capabilities to help security teams work with richer context. Its multi-space analytics approach combines signals from internal security logs (“near-space”) with internet threat signals (“far-space”), extending visibility beyond what internal events alone can reveal.

This approach brings together real-time correlation to prioritize emerging threats; high-performance log analytics to support investigation, threat hunting, and compliance reporting; AI-driven behavioral analytics to surface suspicious activity that rules may miss; adversary signal intelligence to add external threat context; and integrated automation to accelerate action.

For SOC analysts, the potential value is clearer context across detection and investigation. For CISOs and security executives, it is the ability to consider a more unified approach to security operations while building on the detection capabilities and expertise already in place.

5. See your modernization options in the webinar

Whether your immediate priority is Enterprise Security Manager modernization or a broader SIEM strategy, the right next step is to understand the architecture, migration considerations, and platform capabilities before making decisions.

Join the Modernize Your SIEM webinar to explore Enterprise Security Manager Next Generation, examine opportunities to protect and extend your existing Enterprise Security Manager investment, and discover what the broader OpenText SIEM platform can offer your SOC. Register to learn how your team can prepare for the next generation of security operations.

Joe Leung

Joe Leung is the product marketing director for OpenText Cybersecurity's Threat Detection and Response portfolio. Prior to this role, he was the AI product marketing manager focused on use cases for unstructured data analytics. One of the key use cases was converged security.