Alert quality is the product and it delivers
4.2/5overall, average of the five axes
Deployment effort4
Support quality5
Features vs promises5
Pricing transparency3
Return on investment4
What happened
What we bought was somebody else doing triage properly, and the signal to noise on what reaches us is the best I have worked with. Their detection engineering is transparent enough that our own team learns from it rather than being kept outside the glass. Coverage depends on the telemetry you already have, so budget for the EDR underneath.
Worked well
Very high alert quality. Transparent detection engineering. Good API and integration options.
Did not
You still need the underlying EDR. Premium pricing. Less useful if your telemetry is thin.
6 found this helpful