Amazon GuardDuty vs Lacework

Likelihood to Recommend

In a multi-account/multi-tenant environment, GuardDuty often alerts us to possible malicious traffic before it becomes an issue. The ability to automatically enable GuardDuty creates baseline security which is crucial when an account is first created. It also helps greatly in environments where other users are able to create resources as often GuardDuty alerts us to insecure resources we did not know about. It can however sometimes be a little overzealous with its assessments alerting on benign activity which then requires suppression rules.

Read full review

Alex Kranz

Senior System Administrator

Bridgeline DigitalComputer Software, 51-200 employees

View all 1 answers on this topic

This solution is perfect to protect your cloud environment, especially if you have difficulties with AWS services. To handle a scalable environment and give exhaustive visibility of our environment to our DevOps team. The solution is really plugging and playing for vulnerability detection and compliance. You need to wait a few days or weeks to have good detection capabilities to detect threats on your assets and network

Read full review

Verified User

C-Level Executive in Information Technology

Retail Company, 501-1000 employees

View all 5 answers on this topic

Pros

Monitors outgoing connections from AWS resources to known malicious hosts.
Monitors incoming connection to AWS resources from known malicious hosts.
Integrates with other centralized logging solutions.

Read full review

Alex Kranz

Senior System Administrator

Bridgeline DigitalComputer Software, 51-200 employees

View all 1 answers on this topic

Ease of deployment
Log and event correlation and alerting
Vulnerability & Compliance scanning

Read full review

Richard Russell

Director of Information Security & IT Infrastructure

Built TechnologiesFinancial Services, 201-500 employees

View all 5 answers on this topic

Cons

Does not have the ability to add any custom monitors.

Read full review

Alex Kranz

Senior System Administrator

Bridgeline DigitalComputer Software, 51-200 employees

View all 1 answers on this topic

Not all runtime behaviour alerts offer enough data to decide whether or not something is malicious. Having even more data (e.g., what process is doing a specific action) would help.

Read full review

Verified User

Contributor in Information Technology

Information Technology & Services Company, 201-500 employees

View all 5 answers on this topic

Pricing Details

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Starting Price

—

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Starting Price

—

Alternatives Considered

No answers on this topic

Ease of deployment and use.

Read full review

Richard Russell

Director of Information Security & IT Infrastructure

Built TechnologiesFinancial Services, 201-500 employees

View all 5 answers on this topic

Return on Investment

GuardDuty has helped us prevent possible security incidents multiple times which could have caused substantial damage.

Read full review

Alex Kranz

Senior System Administrator

Bridgeline DigitalComputer Software, 51-200 employees

View all 1 answers on this topic

Focus analysts' time on other activities.
Highlighting important events from a large, noisy environment.
Consolidated threat monitoring.

Read full review

Verified User

Engineer in Information Technology

Financial Services Company, 1001-5000 employees

View all 5 answers on this topic

Amazon GuardDuty vs Lacework