HP debuts ArcSight Express 3.0

First SIEM product powered by advanced correlation engine for faster detection and reduced impact of complex cyber attacks.

Johannesburg, 13 Sep 2011

HP today announced HP ArcSight Express 3.0, a unified security solution that transforms the delivery of advanced correlation, log management and user activity monitoring to improve an organisation's ability to rapidly detect and prevent cyber threats.

Cyber attacks have become common occurrences, increasing the need for companies to manage, store and secure growing amounts of sensitive operational data, while quickly identifying associated security risks.

HP ArcSight Express 3.0 is the first security information and event management (SIEM) product powered by the new Correlation Optimised Retention and Retrieval Engine (CORR-Engine). As a result, it delivers the scalability required to correlate, process and store vast amounts of data to advance the detection and prevention of cyber threats and risks.

“With the need to manage and secure ever-increasing volumes of sensitive data, enterprises are confronted with a classic 'big data' challenge,” said Clive Brindley, HP Software Channel Manager, South Africa. “Powered by the CORR-Engine, HP ArcSight Express 3.0 is designed to address this head-on, enabling faster analysis and detection, which in turn reduces the overall cost of combating cyber crime.”

A key component of the HP Security Intelligence and Risk Management (SIRM) platform, HP ArcSight Express 3.0 is a single turnkey appliance that significantly simplifies the installation and operation of a SIEM solution. HP ArcSight Express 3.0 enables IT administrators and security analysts to more quickly respond to business threats than ever before: (1)

* Accelerating the rate to correlate incoming events - leveraging the CORR-Engine - by 300% per second (2).
* Improving the ability to retrieve correlated events stored in the CORR-Engine by 500% (2).
* Increasing storage efficiency requiring one-tenth of the long-term storage space for correlated events (3).
* Operating more efficiently with the use of a common data store across SIEM solutions, which provide a seamless workflow that includes real-time detection, alerting, and forensic analysis and reporting.
* Simplifying administrative tasks with an easy-to-use management console that accelerates SIEM deployment and management.

“The new HP ArcSight Express 3.0 solution delivers dramatic performance improvements over previous versions,” said Matt DeVries, information security engineer at Priority Health, a leading provider of health insurance plans. “The new CORR-Engine technology provides the high-performance backbone that is necessary to keep pace with the growing volume of security data and to detect and respond to sophisticated threats.”

More information about HP ArcSight security solutions is available at


Pricing and availability varies from product to product. For more information, contact Clive Brindley on +27 11 785-1000.

HP's premier client event, HP DISCOVER, takes place from 29 November to 1 December, in Vienna, Austria. The event showcases how organisations can get started on their Instant-On Enterprise journeys.



HP creates new possibilities for technology to have a meaningful impact on people, businesses, governments and society. The world's largest technology company, HP brings together a portfolio that spans printing, personal computing, software, services and IT infrastructure at the convergence of the cloud and connectivity, creating seamless, secure, context-aware experiences for a connected world. More information about HP (NYSE: HPQ) is available at

(1) Based on performance results from HP ArcSight Express 2.0.
(2) Based on internal testing conducted by HP ArcSight, the HP ArcSight Express 3.0 product family achieved the following performance improvements over the HP ArcSight Express 2.0 product family when running on similar specified hardware and leveraging the CORR-Engine: 1) the rate of correlation processing for incoming events improved by three times, or 300%, on a per second basis and 2) the rate of retrieval of correlated events stored in the CORR-Engine (for querying/reporting) improved by five times, or 500%.
(3) In internal lab tests conducted by HP ArcSight, HP ArcSight Express 3.0 used one-tenth the amount of physical disk space for long-term storage of correlated events compared with HP ArcSight Express 2.0.

This news advisory contains forward-looking statements that involve risks, uncertainties and assumptions. If such risks or uncertainties materialise or such assumptions prove incorrect, the results of HP and its consolidated subsidiaries could differ materially from those expressed or implied by such forward-looking statements and assumptions. All statements other than statements of historical fact are statements that could be deemed forward-looking statements, including but not limited to statements of the plans, strategies and objectives of management for future operations; any statements concerning expected development, performance or market share relating to products and services; any statements regarding anticipated operational and financial results; any statements of expectation or belief; and any statements of assumptions underlying any of the foregoing. Risks, uncertainties and assumptions include macroeconomic and geopolitical trends and events; the competitive pressures faced by HP's businesses; the development and transition of new products and services (and the enhancement of existing products and services) to meet customer needs and respond to emerging technological trends; the execution and performance of contracts by HP and its customers, suppliers and partners; the achievement of expected operational and financial results; and other risks that are described in HP's Quarterly Report on Form 10-Q for the fiscal quarter ended April 30, 2011 and HP's other filings with the Securities and Exchange Commission, including but not limited to HP's Annual Report on Form 10-K for the fiscal year ended October 31, 2010. HP assumes no obligation and does not intend to update these forward-looking statements.

(c) 2011 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.

Editorial contacts