Now that SEM 2026.4 is generally available, our teams are already hard at work on the next release.
Before we look forward, here's what landed in 2026.4.
SEM 2026.4 delivered on our platform hardening priorities for federal and regulated environments - a dedicated FIPS edition of the SEM Manager for FIPS 140-3-aligned deployments on Red Hat Enterprise Linux 9.8, IPv6 and dual-stack support, and STIG-focused password, certificate, and LDAP hardening.
We also expanded Anomaly Detection with three new use cases - Ransomware/File Integrity Monitoring, Port Scanning, and Password Spraying - plus new Send to Rules and Send to Historical Events actions so you can act on anomalies, and introduced Query Packs for guided compliance reporting, starting with NIST 800-53 (Rev 5.2.0).
What's Next: Our Priorities for 2027
As we look toward 2027, our priorities for SolarWinds® Security Event Manager (SEM) remain focused: connect SEM to Avior for goal-oriented, AI-driven security operations, make detections smarter and more actionable, make compliance reporting more flexible, and keep the platform current and secure.
Key initiatives we're working on:
- Avior integration - bringing SEM into Avior, SolarWinds' goal-oriented AI platform, so Avior agents can use your SEM data to triage alerts, correlate evidence, and build investigation and compliance summaries. We're exposing SEM capabilities such as event search, anomaly context, and rule details as Model Context Protocol (MCP) tools, starting with a focused set and expanding from there.
- Cross-product goals with SolarWinds Observability Self-Hosted - if you also run Observability Self-Hosted, Avior goals can bring SEM security events together with your network, systems, and configuration data in one investigation. For example, Avior could check whether a network or performance incident has a security cause, or assemble audit evidence from SEM logs and NCM configuration history into a single evidence pack - the possibilities are endless.
- Anomaly Detection beyond Technical Preview - working toward moving Anomaly Detection out of Technical Preview, building on the use cases and actions delivered in 2026.4.
- Custom Query Packs - building on the NIST 800-53 pack so you can create, edit, and organize your own query packs for the compliance and reporting needs that matter to you.
- Further out, we're researching SigmaHQ rule ingestion and a "bring-your-own" model for custom anomaly detection use cases.
This roadmap is designed to help security teams minimize noise, maximize insight, streamline compliance, and leverage emerging AI capabilities for smarter, faster, and more secure operations.
This forum contains forward-looking statements regarding future product plans and development efforts. SolarWinds considers various features and functionality prior to any final generally available release. Information in this forum regarding future features and functionality is not and should not be interpreted as a commitment from SolarWinds that it will deliver any specific feature or functionality in the future or, if it delivers such feature or functionality, any time frame when that feature or functionality will be delivered. All information is based upon current product interests, and product plans and priorities can change at any time. SolarWinds undertakes no obligation to update any forward-looking statements regarding future product plans and development efforts if product plans or priorities change. |
|---|
