AgileBlue

In my opinion, AgileBlue excels for small teams with a breadth of platforms and responsibilities under their umbrella. If ones organization has independent security, network, patch, etc. departments, AgileBlue may feel redundant.

Incentivized

• They are extremely quick identifying any potentially unusual activity
• They make it easy for us to ensure that our employees can log in from other countries without triggering suspicious activity lock-outs when they travel.
• Our quarterly meet-ups are a great way to keep my team up to date in the current cloud security scene, as well as to make sure we're doing everything we can to keep our users safe.

• the web ui can be wonky at times but overall its great.
• the agent when installed with sys log can get flakey
• Fire a webhook when alerts occur

Incentivized

I give it a 9 because it has so much more information than other tools we've used in the past. That is great, but it can get a little overwhelming when trying to narrow down exactly what you need to see. I will say, though, the information has gotten a lot easier to digest with the rollout of their new AI features.

Incentivized

I have never contacted support.

AgileBlue integrates as a partner to SentinelOne - allowing out MSSP to have insights into both platforms. Using AgileBlue as an escalation management tool allows false positive results to get handled quickly, low severity alerts to be dealt with before escalations, and high severity alerts to get forwarded to the appropriate members of higher-level triage teams

Incentivized

• Having AgileBlue as our cyber security watchdogs gives that peace of mind knowing that they are on the cutting edge of cyber security and are real pros.