AgileBlue vs. UnderDefense

AgileBlue has really made securing our Microsoft Azure based environment easy, and I just can't picture how it could be made even simpler. Their monitoring of our environment and reaction times are second to none, the administration console is easy to use, and their team is always very quick to respond to any questions or requests we may have

• They are extremely quick identifying any potentially unusual activity
• They make it easy for us to ensure that our employees can log in from other countries without triggering suspicious activity lock-outs when they travel.
• Our quarterly meet-ups are a great way to keep my team up to date in the current cloud security scene, as well as to make sure we're doing everything we can to keep our users safe.

• the web ui can be wonky at times but overall its great.
• the agent when installed with sys log can get flakey
• Fire a webhook when alerts occur

Incentivized

For smaller businesses that do not have an IT department some of the communications can be overly technical when discussing recommended patches and upgrades

I have never contacted support.

AgileBlue integrates as a partner to SentinelOne - allowing out MSSP to have insights into both platforms. Using AgileBlue as an escalation management tool allows false positive results to get handled quickly, low severity alerts to be dealt with before escalations, and high severity alerts to get forwarded to the appropriate members of higher-level triage teams

Incentivized

• Allows IT staff to focus on other tasks rather than manually monitoring the network 24/7.
• We've been able to configure the tool to fit our exact reporting/auditing needs.

Incentivized