AWS Security Hub vs. OnPage

I don't think there's yet a perfect tool in this category of security and incident aggregators, but AWS Security Hub is an excellent tool for having visibility into our overall security posture. It is a great aggregator for many AWS services but also for third party security tools with which it integrates really well.

Incentivized

The best solution for OnPage is a small company with a small On-Call Team. The reason for this is because of how many it can trigger in a 30-minute time span. It's really good with us IT people as we understand the urgency of the call and we can react with the ticket. This gives the end-user peace of mind. This product would not be good for a large-scale company. It would not scale well for thousands of users.

Incentivized

• Alerting
• Aggregation, organization and prioritization of security alerts and events
• Third party integration

Incentivized

• Delivers prompt messages with important information for patient call back
• Overrides phone ring settings if needed to ensure a sound is made if desired and no pages are missed
• Repeats pages frequently if not opened initially, so they are not forgotten

Incentivized

• Not easy to read past data, especially once it moves into Glacier deep storage
• performance is somewhat sluggish ... other systems are much faster to analyze data
• Doesn't always provide a remediation solution or suggested fix like other 3rd party tools like Qualys.
• It's hard to get the initial configuration and enrollment completed as there's a lot of manual intervention for every configured rule that needs to be enabled
• alerts are often times delayed

Incentivized

• Not really a "downside": because it works so well, any details we haven't documented from our initial setup are probably lost. It's been almost four years since our initial configuration, and I can no longer easily navigate the OnPage site because I literally haven't logged in since the initial implementation.

Incentivized

It works and is reliable

Easy to use both web and phone based application.

Some outages for updates

Incentivized

I have done well with the service

Incentivized

When we have issues we have fast response and willingness to help

I had no part of the implementation

AWS Security Hub is it's own unique program that I have used. I haven't used anything similar to it and it was worth it to try out. However, for those that want to keep for long, it will be very heavy in term of budget and resource that they have to provide.

Incentivized

OnPage is the first we chose and would not change that. The ability to link to our CSM, RMM, and technicians on the road has made this the best solution. Our team is able to use the current setup to make custom alerts based on the ticket details. This allows for all of our future needs to be covered.

Incentivized

I have had no concerns

Incentivized

• Since we have started using this, we could notice a drop of security issues

Incentivized

• Eliminated the concern that on-call personnel were not notified of an issue at all or on a timely basis
• The reasonable cost, ease of use and reliability reassured management that any issues arising would be handled quickly
• Users disliked carrying the bulky, unreliable and battery operated pagers. Today all users carry cell phones and can easily install and manage OnPage software