How to modernize your SOC: OpenText Enterprise Security Manager Next Generation
News | 13.11.2026
Security operations centers face rising alert volumes, AI-driven attacks and limited analyst capacity, while SIEM platforms must scale without discarding years of detection content. OpenText Enterprise Security Manager Next Generation addresses this by combining real-time correlation with a containerized architecture, a modern analyst experience and native SOAR. Softprom is the official distributor of OpenText.
What was announced
OpenText introduced Enterprise Security Manager Next Generation, an evolution of its SIEM built on a Kubernetes-based Run Anywhere architecture. The release adds a web-based analyst interface, interactive dashboards, improved MITRE ATT&CK reporting, a rule creation wizard, streamlined certificate management and native SOAR with pre-built playbooks at no extra licensing cost. Teams can export and import existing ESM 7.x detection content. ESM 7.9 will receive security patches until sunset in 2029 but no new features.
Why this matters
For CISOs and IT directors, the containerized model aligns SOC roadmap with broader modernization and cloud strategies. For SOC managers and procurement, native SOAR removes a separate line item, while content import protects years of institutional knowledge. Because in-place upgrade is not supported, security leaders should plan a migration project rather than a version update, and inventory critical detection content before the 2029 ESM 7.9 sunset.
Technical details
- Architecture: fully containerized, Kubernetes-based, Run Anywhere deployment
- Analyst UX: modern web UI, interactive dashboards, MITRE ATT&CK reporting
- Detection engineering: web-based content development and rule creation wizard
- SOAR: native, with pre-built and customizable playbooks, no extra license
- Migration: import and export of ESM 7.x content; no in-place upgrade
- Platform context: multi-space analytics combining near-space logs with far-space threat signals
- Lifecycle: ESM 7.9 security patches until 2029 sunset
FAQ
Can we reuse our existing SIEM detection rules?
Yes. Enterprise Security Manager Next Generation supports export and import of ESM 7.x content so teams can carry over correlation rules, use cases and tuning rather than rebuild from scratch.
Is an in-place upgrade from ESM 7.x to Next Generation supported?
No. Because Next Generation uses a containerized Kubernetes architecture, OpenText requires a migration project. Upgrade support and professional services are available.
Does native SOAR require an additional license?
No. SOAR capabilities, including pre-built and customizable playbooks, are included with Enterprise Security Manager Next Generation at no additional licensing cost.
Softprom and OpenText
Softprom is the official distributor of OpenText. Our team supports assessment, licensing, migration planning and deployment of Enterprise Security Manager Next Generation for SOC teams.
Plan your SIEM modernization with OpenText and the Softprom team.
Prepared by the Softprom editorial team based on vendor materials (Softprom DistriFlow). Source: original article.