AWS Security Hub vs. Cloudyn vs. IBM Cloudability

I don't think there's yet a perfect tool in this category of security and incident aggregators, but AWS Security Hub is an excellent tool for having visibility into our overall security posture. It is a great aggregator for many AWS services but also for third party security tools with which it integrates really well.

Incentivized

I don't have much exposure to the tool. I mean, I'm relatively new to using it as a platform, but I haven't really seen the benefit, especially with the actual renewal talks at the company. I'm not seeing what AWS native solutions are, how probability improves on that as opposed to just using AWS and just, I don't know. I'm not seeing the benefit, at least in my eyes.

Incentivized

• Brings together the security related AWS tools in one dashboard
• Allows to pick and chose which AWS security tools to use
• Clean UI

Incentivized

• We are able to integrate multiple sources of data to have a comprehensive view of our spend.
• We are able to get more detailed insights via container dashboard for kubernetes spend
• A unified platform to manage overall cloud spend along with related FinOps spend

Incentivized

• Not easy to read past data, especially once it moves into Glacier deep storage
• performance is somewhat sluggish ... other systems are much faster to analyze data
• Doesn't always provide a remediation solution or suggested fix like other 3rd party tools like Qualys.
• It's hard to get the initial configuration and enrollment completed as there's a lot of manual intervention for every configured rule that needs to be enabled
• alerts are often times delayed

Incentivized

• For me, it is a lot of anomaly detection and I think there's a lot of improvement that can be made to show anomalies that happen over time because if it's just day to day or week to week, you may not see the change. But if you see the trend over a period of time, show me something that has grown 40%, 50% over the past three months and maybe you can do those things and we just haven't figured them out yet. So we are very new to the product, but I think anomaly detection for me is one of the bigger things.

Incentivized

Cloudability has been one solution for almost all of our FinOps needs. Except for Data transfer costs, we have covered all use cases and have made significant savings across our cloud infrastructure. Reporting has provided management a deeper analysis into their spending and helped them forecast their budgets for next year

Incentivized

AWS always good with usability and same here for AWS Security Hub. A lot of good documentation is available to read and configure your own. We also started with looking at the videos and documentation to configure automation for our compliance checks. And to configure there are very less steps to be followed which is a very good thing for faster configuration.

Incentivized

I gave the IBM Cloudability a 7/10 because it is good, but it could improve in some places. It is easy to get data uploaded and ready to view, but it is only up to a certain point in time, and not live data. As for how it looks, the interface is good for viewing, however navigation could be a little better, maybe supported with a roadmap.

Incentivized

Only been 1 or 2 occaisions when not available, in 3 years

Incentivized

Afternoons tend to be a little slower, due to US traffic I assume

Incentivized

While there have been few support cases where the experience was good. But in multiple support cases it's firstly delayed and even after weeks or months of time, team is not able to provide us with the RCA of the issue. All they are claiming is the issue is now fixed which I still see coming back after few days or weeks as we've never identified and addressed the root cause.

Incentivized

Training was adequate, but the real learning begins when you start using the product, like most things. All major functions were covered so as an entry point, was a good introduction to the product. The training pace was good as well, the areas were covered in decent depth, without being too much of an information overload.

Incentivized

Within months

AWS Security Hub is it's own unique program that I have used. I haven't used anything similar to it and it was worth it to try out. However, for those that want to keep for long, it will be very heavy in term of budget and resource that they have to provide.

Incentivized

Before Apptio we extensively used the cloud native and in house automated and developed cost optimization tool using python , powershell and leveraging the various cloud native services like AWS systems manager , Azure Functions and Azure automation run books.

Incentivized

I wasn't personally involved, but all dealings with Apptio have been easy

Incentivized

Works as designed

Incentivized

• The automated compliance test helped us a lot to get PCIDSS certified so it was a very good return for our investments.
• Some third party tools we were using were not available for AWS Security Hub automated testing.
• Easy to configure for faster security automations but if we need detailed reports we should add more tools.

Incentivized

• Apptio Cloudability has enabled us to charge back 100% of our cloud spend to our business users and on an automated basis through the use of ApptioOne
• Apptio Cloudability's transparency and metrics have enabled us to save millions of dollars in cloud spend across our user base.

Incentivized