AWS Security Hub vs. DERDACK Enterprise Alert

I don't think there's yet a perfect tool in this category of security and incident aggregators, but AWS Security Hub is an excellent tool for having visibility into our overall security posture. It is a great aggregator for many AWS services but also for third party security tools with which it integrates really well.

Incentivized

DERDACK Enterprise Alert is extremely well suited, when different teams (subject matter experts) are involved in the technical support process. Quick and easy responses (acknowledgements, exection of scripts/tasks/processes, etc.) are key. Also, DERDACK Enterprise Alert is on one hand easy to deploy, but API offers a variety of customized integrations.

Incentivized

• Alerting
• Aggregation, organization and prioritization of security alerts and events
• Third party integration

Incentivized

• Self Managed On-Call scheduling for teams.
• Ability to back track an alert and review the stages of escalation.

Incentivized

• Not easy to read past data, especially once it moves into Glacier deep storage
• performance is somewhat sluggish ... other systems are much faster to analyze data
• Doesn't always provide a remediation solution or suggested fix like other 3rd party tools like Qualys.
• It's hard to get the initial configuration and enrollment completed as there's a lot of manual intervention for every configured rule that needs to be enabled
• alerts are often times delayed

Incentivized

• More integrations with other ITSM vendors

Incentivized

Very intuitive use, almost no training necessary.

Incentivized

The best experience.

Incentivized

AWS Security Hub is it's own unique program that I have used. I haven't used anything similar to it and it was worth it to try out. However, for those that want to keep for long, it will be very heavy in term of budget and resource that they have to provide.

Incentivized

Cost of ownership was more than double in more than five years.

Incentivized

• Since we have started using this, we could notice a drop of security issues

Incentivized

• It supports us not to incur penalties of missed SLAs - clients and internal

Incentivized