Aqua Cloud Native Security Platform vs. Tripwire IP360

Excellent tool for identifying Cloud security issues such as vulnerabilities or misconfigurations. The complaince scanning ability is perfect for enterprise organization to maintain complaince based off various complaince programs.

Incentivized

I think Tripwire IP360 is suited for any environment as long as the leadership is willing to support the outcome.

Incentivized

• seamless integration with GitHub, Jfrog, etc
• Easy configuration of security policy
• detailed instructions regarding finding of Vulnerabilities

Incentivized

• I find the Tripwire IP360 reporting features extraordinary. I can run various audit and inventory reports at any point since the inception of the tool. For example, I can execute a report on the history of an asset, which establishes a baseline and can be used to support many security objectives.
• Scan scheduling. This feature allows the tool to run independently without human intervention. I don’t have time to manually run scans of different departments. Therefore, I schedule all my audits and check the report the next day. This has worked brilliantly for 3 years now.
• Automated update of the vulnerability rules. Automatically updating these rules and binding them to the scans preserves the tool relevancy during audits

Incentivized

• The UI/UX of the Aqua platform has several issues, especially with the sign up/in flow, authentication, alerts and display of results
• Missing a few prominent notification channels for alerts such as Datadog, Webhooks
• Lacks complete granularity in RBAC with the ability to set permissions based on the cloud
• Some parts of the cocumentation for connecting an Oracle Cloud account is not up to update or clear

Incentivized

• I’d like to see IP360 have the ability to discover additional security appliances such as PaloAlto and Fortinet appliances.

Incentivized

The UI and UX of the platform requires some work since the platform is not for all screen sizes and the experience with certain features such as authentication and creating alerts is not great. The session times out while performing an action and having to repeat the entire action once again, which is not a great experience. Adding notification channels while creating the alerts is not seamless. But the platform has good UX with some great documentation for integrations along with the ability to customise dashboards.

Incentivized

Aqua Cloud Native Security Platform is easy to implement and manage compare the Dome9.

Incentivized

I chose Tripwire IP360 because of its flexible reporting features

Incentivized

• ROI is high with our Aqua project.

Incentivized

• The biggest impact Tripwire has had in the organization is risk reduction. Since the inception of the tool our vulnerabilities have been reduced by 40%.

Incentivized