The vendor presents AWS Control Tower as the easiest way to set up and govern a new, secure multi-account AWS environment. With AWS Control Tower, builders can provision new AWS accounts in a few clicks, while knowing new accounts conform to company-wide policies.
N/A
Microsoft Defender for Cloud
Score 8.6 out of 10
N/A
Microsoft Defender for Cloud is a Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP) for Azure, on-premises, and multicloud (Amazon AWS and Google GCP) resources.
We did not look at other vendors because we generally want to try to use AWS native products as much as possible for greater support directly from AWS and to reduce 3rd party priority shifts.
Using AWS Systems Manager and other slightly lower level components has been helpful for us to manage parts of our AWS presence at a more granular level than AWS Control Tower was designed for. It's not at all an apples-to-apples comparison as they solve different use cases, …
Because we do a profound review of functionalities, configurations, and security operations from our soft team's perspective. The best one that adapts to our actual architecture, and I mean it's so negative for us because we are more prone to Microsoft products, was Microsoft …
Competitive-wise, we've looked at Palo Alto and Proofpoint. So we selected Microsoft Defender for Cloud on the basis it was linking closer to the identity, but we've had to also, I said earlier that we've aligned with Palo Alto for the secondary tech to look at it from a device …
Barracuda goes neck to neck with Microsoft Defender for Cloud in the anti-spam, anti-phishing email suite. But why I chose this product is because again, it's very well embedded with Microsoft technology, and we're a Microsoft shop, and it works well for us to use that product …
We were one of the first ones to deploy when Microsoft released it, so it's hard to compare, but what we hear from competitors, the fact that Microsoft can see the full ecosystem using this product makes it a lot better as compared to using a third party tool. So it's the ease …
Evaluated between cost. I just think it integrates better with the Microsoft stack and I mean, I think just cost from just that perspective and being the one pane of glass, I think that's enough.
I believe Microsoft Defender for Cloud stacks up well against the other tools we looked at. It is native to the Azure platform and provides the same insights as the other tools. We selected Microsoft Defender for Cloud because it integrates well with the Azure resources and …
Microsoft Defender for Cloud offered a more integrated and comprehensive solution for our multi-cloud environment, integrating well with our security and compliance needs
Microsoft Defender for Cloud is definitely the choice with the latest market trend and attacks that are currently happening. Microsoft has been able to safe guard a lot after the recent serious attacks happening globally in the digital world. There is a trust in this software …
There is the several ways to protect the applications and lot more tools available in the market. Most commonly we used Crowd strike Falcon for endpoint detection and response capabilities. McAfee endpoint protection also provide broad range of security features. Best …
We used to use Symantec and McAfee. It's been mostly defenders since, gosh, the last eight to 10 years. So we're a small organization. We don't have a lot of folks, so single-painted glass is really important to be able to see the whole environment in a single place. And the …
When we purchase this data fund, we check with not competition and we decided to purchase these tools because it's strong and we have a good relationship with Microsoft.
It is very good in comparison to other products that we have used. Its price is very effective and attractive, and it also provides good security policies. threat intelligence is also good and user protection is also very much better, and it also serves new updates as and when …
AWS Control Tower is great if you have multiple organizations or disciplines inside a company that needs to be separated for billing purposes or separation of concern. Multiple accounts is part of AWS's well-architected framework and are generally a good idea. AWS Control Tower makes central logging easy which enables those logs to be quickly picked up by a logging tool to provide even more reports and insight. For smaller organizations, AWS Control Tower may seem like an over-engineered solution
Microsoft Defender for Cloud is very good at allowing users to see how their Azure environment is secure through the secure score. The recommendations are an excellent source of the controls that should be in place to ensure a secure environment. There needs to be more protection and features for data security.
AWS Control Tower integrates with AWS organizations
AWS Control Tower provides Account Factory to provision preconfigured AWS accounts
AWS Control Tower helps to isolate workloads and billing via AWS accounts separation
AWS Control Tower supports data residency controls out of the box
AWS Control Tower supports post provisioning actions to newly provisioned AWS accounts: for example it can trigger enabling VPC flow logs in the new account
Automation is crucial to managing sprawl and the additional complexity that comes with it. SOC management workbooks and process automation give significant flexibility.
The Security posture score and Security Alerts are neatly centralized and offer me crucial information quickly.
Defender for Cloud avoids the common compromise of simplicity for completeness (former Azure Security Center). The security warnings and advice go into great detail while remaining current and useful.
UI/UX. It can get a little messy when navigating around with all the flyouts in the Azure portal which can be frustrating, particularly when under time pressure.
The query languages for the queries and workbooks are another language that needs to be learned - it would be nice to have kept it closer to T-SQL or something like that to minimize the need to learn new syntax.
Adding cost estimations to the security recommendations would really improve the experience.
It is a great product that integrates nicely when running an Azure platform and even multi-cloud environment. Not looking for point-solutions but a suite that answers most requirements. It is very comfortable being able to use KQL, workbooks and automation that is native to the azure platform
There is no way to easily close an AWS account whether it was created manually or via the AWS Control Tower. It takes too many steps to close it vs to provision a new AWS account
My visibility is limited because I'm only doing very small pieces of what the overall org does. And also, we have limitations on what we're allowed to use. It's not like we get a new product as users or leadership level users, and everything is on, and we can just do whatever we want. We're very restricted in what we can use any tooling within the org because of the different levels of regulatory constraints we have, because of just the nature of who we are inherently. So that's why. I don't think it's necessarily the product. I think it's more or less of what we're able to do with the product.
Using AWS Systems Manager and other slightly lower level components has been helpful for us to manage parts of our AWS presence at a more granular level than AWS Control Tower was designed for. It's not at all an apples-to-apples comparison as they solve different use cases, but for us, the use case associated with AWS Systems Manager was a better fit for our specific needs and skillsets. We did not need everything that AWS Control Tower was doing for us.
Barracuda goes neck to neck with Microsoft Defender for Cloud in the anti-spam, anti-phishing email suite. But why I chose this product is because again, it's very well embedded with Microsoft technology, and we're a Microsoft shop, and it works well for us to use that product and have better visibility versus Barracuda being just an offshore, just a single product versus Microsoft Defender for Cloud being blended with other applications.
