AWS Security Hub vs. Everbridge IT Alerting

I don't think there's yet a perfect tool in this category of security and incident aggregators, but AWS Security Hub is an excellent tool for having visibility into our overall security posture. It is a great aggregator for many AWS services but also for third party security tools with which it integrates really well.

Incentivized

Targeting people (or their SIM cards to be specific) in a specific area and warning them about a hazard in their neighbourhood is the intended use, and it executes that perfectly. In addition we have implemented the traveller alert where we can send messages to all Icelandic SIM cards present inside another Country (another Country code), and send them messages about f.ex. terrorist attack and provide guidelines about where they shoud seek assistance if needed. A slight minus here is that you can only address entire countries, where it might be useful to have next level of area codes.

Incentivized

• Alerting
• Aggregation, organization and prioritization of security alerts and events
• Third party integration

Incentivized

• Not easy to read past data, especially once it moves into Glacier deep storage
• performance is somewhat sluggish ... other systems are much faster to analyze data
• Doesn't always provide a remediation solution or suggested fix like other 3rd party tools like Qualys.
• It's hard to get the initial configuration and enrollment completed as there's a lot of manual intervention for every configured rule that needs to be enabled
• alerts are often times delayed

Incentivized

I would really like to have easier reporting. What warnings were issued, when, and received by how many, by operator or area etc..

Incentivized

The support team has been very supportive, but there is only so much they can do, and of course sometimes things take a bit too long for my impatience.

Incentivized

AWS Security Hub is it's own unique program that I have used. I haven't used anything similar to it and it was worth it to try out. However, for those that want to keep for long, it will be very heavy in term of budget and resource that they have to provide.

Incentivized

I have reviewed quite a few at conferences, but none to the depth of installation and use.

Incentivized

• Since we have started using this, we could notice a drop of security issues

Incentivized

• The government has the duty to equip itself with a mechanism to warn its people. It has allocated that duty to us, and we have chosen Everbridge to provide us the tool for that duty. It is very well suited to fulfill that role.

Incentivized