AWS Security Hub vs. PagerDuty

I don't think there's yet a perfect tool in this category of security and incident aggregators, but AWS Security Hub is an excellent tool for having visibility into our overall security posture. It is a great aggregator for many AWS services but also for third party security tools with which it integrates really well.

Incentivized

To be sincere, PagerDuty is a powerful, intelligent, and dependable on-call and incident management tool that provides amazing solutions to our company. Therefore, if someone is looking for reliability and accuracy in incident management, I will not hesitate to recommend PagerDuty. It is easy to use, and it will give you value for money.

• Brings together the security related AWS tools in one dashboard
• Allows to pick and chose which AWS security tools to use
• Clean UI

Incentivized

• PagerDuty sends the alerts set on high severity incidents on time and never misses any single instance.
• PagerDuty help to send alert to mobile calls and Team channel for outage.
• PagerDuty also resolves some of the high severity incidents as part of self healing mechanism.

Incentivized

• Not easy to read past data, especially once it moves into Glacier deep storage
• performance is somewhat sluggish ... other systems are much faster to analyze data
• Doesn't always provide a remediation solution or suggested fix like other 3rd party tools like Qualys.
• It's hard to get the initial configuration and enrollment completed as there's a lot of manual intervention for every configured rule that needs to be enabled
• alerts are often times delayed

Incentivized

• When I open PagerDuty the page does look a little cluttered or busy.
• It would be nice to go to the page with clear and straightforward instructions on what I must address.
• Ability to change the color background.
• Add a timer and alarms for tasks that need completed.

Incentivized

They have been rock solid for us thus far and are not very expensive and to be honest no time to evaluate other software at this point.

Incentivized

AWS always good with usability and same here for AWS Security Hub. A lot of good documentation is available to read and configure your own. We also started with looking at the videos and documentation to configure automation for our compliance checks. And to configure there are very less steps to be followed which is a very good thing for faster configuration.

Incentivized

The UI is more complex than I would like. Part of the challenge is that most users use PagerDuty infrequently; I don't remember how I changed a policy last time. Another part of the challenge is that some users expect alerting to be a trivial feature, and are reluctant to invest any time in reading the documentation.

Incentivized

PagerDuty is reliable and easy to set up. It gives an effective way to notify the team about critical incidents which results in a faster turnaround time on issues. users can customize their alerts rules based on their preferences. Overall it's effective and easy to use which adds great business value.

Incentivized

When I setup notifications to PD thru the Python API I was impressed with the ease with which I could set up the software/service.

Incentivized

AWS Security Hub is it's own unique program that I have used. I haven't used anything similar to it and it was worth it to try out. However, for those that want to keep for long, it will be very heavy in term of budget and resource that they have to provide.

Incentivized

OpsGenie was useful, mainly for teams already using Atlassian tools, and xMatters was good for handling team communication during incidents, but PagerDuty felt more complete for managing the full incident process in one place. We went with PagerDuty because it manages alerts, escalations, and on-call duties in a more organized and dependable way, which fits better with how our teams work daily.

• The automated compliance test helped us a lot to get PCIDSS certified so it was a very good return for our investments.
• Some third party tools we were using were not available for AWS Security Hub automated testing.
• Easy to configure for faster security automations but if we need detailed reports we should add more tools.

Incentivized

• Allow our service to be available 24/7 with minimal downtime, improving customer experience
• Monitor incidents and allow us to customize/schedule alert notifications, making engineers' jobs easier and preventing turnover
• Prevent SEVs that could deteriorate, bring down our service, and cost us millions of dollars from loss in bookings

Incentivized