Cloudflare Zero Trust Services vs. SUSE NeuVector

I wanted to securely connect to my servers without getting tracked by malicious attackers, even though I was on public Wi-Fi. Security was my top priority, and I also wanted a setup that was easy and quick to start and provided great network performance. Cloudflare's Zero trust matches my criteria for becoming my first choice.

Incentivized

SUSE NeuVector is exceptional when you want to make your Kubernetes cluster secure. You can limit network connections, scan containers, container registries and Kubernetes nodes for vulnerable software, forbid running specific commands on certain or all containers. You can enable security for individual containers - when SUSE NeuVector has learned container specifics. That's why you can deploy SUSE NeuVector on production Kubernetes clusters where you are already running conteiners - it will not break anything.

• Granular Restrictions
• Bot Management
• DNS protection

Incentivized

• Scans containers software for known vulnerabilities
• Denies command execution in containers
• Prevents unwanted network connections from/to containers

• Good to see content re-categorization with different list for organizations.
• URL and headers rewrite.
• Events forwarding to on-premise SIEM.

Incentivized

• I like everything about NeuVector. They are on the right development path.

Overall, Cloudflare Zero Trust Services is very usable. We just need to do a one-time setup on Cloudflare Zero Trust Service's website, download their app on the device, and connect it with secure authentication. That's it. The apps are available for almost all kinds of devices that we use, and hence, we can secure all of our required devices. The app interface is very user-friendly and has logging capability to debug in case something goes wrong.

Incentivized

Good chat support from the portal for basic questions and minor issues. The enterprise support line is provided as well.

Cloudflare was both the most feature-rich and cost-effective of comparisons. Presales engagement understood our challenges and was keen to solve them.

Incentivized

SUSE NeuVector is deployed on your Kubernetes, and data does not leave your data center. Sysdig is a cloud platform - you have no full control over what happens with your data. Also, SUSE NeuVector has a capability to prevent specific command execution ir containers, but Sysdig does not have such ability. Sysdig is not an open-source solution, but SUSE NeuVector is.

• Cloudflare as a multipurpose vendor and solution helped us to replace many overlapped imperfect solutions.
• Cloudflare gives the company administrator a single pane of glass view which makes his work more effective.
• Cloudflare makes cloud transformation easier and more effective.

Incentivized

• We went from being blind to what happens in the Kubernetes network to seeing everything and being able to control Kubernetes network communications.
• Now we are able to detect vulnerable containers faster.