TrustRadius: an HG Insights company

Cofense Triage vs. OpenText Threat Detection and Response

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Cofense Triage

    Score9.4 out of 10
    Enterprise companies (1,001+ employees)
    Cofense Triage accelerates phishing qualification, investigation, and response by automating standard responses to suspicious emails to make analysts more efficient and driving out actionable intelligence, and providing incident response playbook.N/A

    OpenText Threat Detection and Response

    Score7.4 out of 10
    N/AA combined SIEM and SOAR, used to accelerate threat detection and response with holistic security analytics, native SOAR, and intelligent automation.N/A
    Pricing
    Cofense TriageOpenText Threat Detection and Response
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Cofense TriageOpenText Threat Detection and Response
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    YesNo
    Entry-level Setup FeeOptionalNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Cofense TriageOpenText Threat Detection and Response
    Considered Both Products
    Cofense
    No answer on this topic
    OpenText
    No answer on this topic
    Key User Insights
    Would buy again
    89%
    Would buy again
    33 Answers
    60%
    Would buy again
    3 Answers
    Delivers good value for the price
    96%
    Delivers good value for the price
    24 Answers
    100%
    Delivers good value for the price
    5 Answers
    Happy with the feature set
    97%
    Happy with the feature set
    36 Answers
    80%
    Happy with the feature set
    4 Answers
    Lived up to sales and marketing promises
    100%
    Lived up to sales and marketing promises
    18 Answers
    No answers on this topic
    Implementation went as expected
    91%
    Implementation went as expected
    20 Answers
    80%
    Implementation went as expected
    4 Answers
    Features
    Cofense TriageOpenText Threat Detection and Response
    Incident Response Platforms
    Comparison of Incident Response Platforms features of Cofense Triage and OpenText Threat Detection and Response
    Feature
    Cofense Triage
    6.4
    35 Ratings
    33% below category average
    OpenText Threat Detection and Response
    -
    Ratings
    Integration with Other Security Systems5.034 Ratings00 Ratings
    Attack Chain Visualization6.127 Ratings00 Ratings
    Centralized Dashboard7.735 Ratings00 Ratings
    Live Response for Rapid Remediation6.731 Ratings00 Ratings
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Cofense Triage and OpenText Threat Detection and Response
    Feature
    Cofense Triage
    -
    Ratings
    OpenText Threat Detection and Response
    5.5
    4 Ratings
    37% below category average
    Centralized event and log data collection00 Ratings8.04 Ratings
    Correlation00 Ratings9.04 Ratings
    Event and log normalization/management00 Ratings8.04 Ratings
    Deployment flexibility00 Ratings6.04 Ratings
    Integration with Identity and Access Management Tools00 Ratings6.03 Ratings
    Custom dashboards and workspaces00 Ratings5.04 Ratings
    Host and network-based intrusion detection00 Ratings8.02 Ratings
    Data integration/API management00 Ratings5.01 Ratings
    Behavioral analytics and baselining00 Ratings2.01 Ratings
    Rules-based and algorithmic detection thresholds00 Ratings8.01 Ratings
    Response orchestration and automation00 Ratings2.01 Ratings
    Reporting and compliance management00 Ratings4.01 Ratings
    Incident indexing/searching00 Ratings1.01 Ratings
    Best Alternatives
    Cofense TriageOpenText Threat Detection and Response
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    No answers on this topic
    IBM Security QRadar SIEM
    Score8.9 out of 10
    Enterprises
    No answers on this topic
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Cofense TriageOpenText Threat Detection and Response
    Likelihood to Recommend
    7.5
    (38 ratings)
    9.0
    (6 ratings)
    Likelihood to Renew
    10.0
    (1 ratings)
    -
    (0 ratings)
    Usability
    10.0
    (1 ratings)
    7.0
    (1 ratings)
    Availability
    10.0
    (1 ratings)
    -
    (0 ratings)
    Performance
    10.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    -
    (0 ratings)
    8.0
    (4 ratings)
    In-Person Training
    10.0
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    10.0
    (1 ratings)
    -
    (0 ratings)
    Configurability
    10.0
    (1 ratings)
    -
    (0 ratings)
    Product Scalability
    10.0
    (1 ratings)
    -
    (0 ratings)
    Vendor post-sale
    10.0
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    10.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Cofense TriageOpenText Threat Detection and Response
    Likelihood to Recommend
    Cofense
    The tool is very helpful in improving Phishing detection capabilities as it streamlines the process of analyzing user reports a lot. Besides it has a built-in mechanism of rating reporters(end-users) based on their historical performance. Downside - tool requires continuous resource investment to deliver best result. Tool is not helping too much in improving user-education, because automated response process is not immediate and is prone to errors
    Incentivized
    Read full review
    OpenText
    In the current lot of hundreds of SIEM solutions out there in the market, ArcSight ESM is fairly less expensive with strong fundamentals in place. The log ingestion, correlation are very well performing and totally worth ROI. However, the tool has lost its way when it comes to staying abreast with current feature curve of SIEM technology and the evolution has not been done by MicroFocus. Search times are high and there is no major plug-in that has been introduced as part of the product life cycle.
    Incentivized
    Read full review
    Pros
    Cofense
    • Separating links and attachments contained in the email, and checking to see if they are known malicious.
    • Clustering like emails to save time when responding.
    • Providing risks scores with each cluster to give an estimate on which clusters should be addressed first.
    Incentivized
    Read full review
    OpenText
    • Integration with smart logger and ESM to create rules and easy management of the same.
    • Easy integration with all end point security management tool(IPS/IDS, Firewall, Anti-Virus) and their consolidated output at a single place to effectively rectifying true and false positives.
    Incentivized
    Read full review
    Cons
    Cofense
    • There are too many interdependent pieces which you have to acquire separately.
    • I think Cofense has a lot of capabilities and usefulness, but I think it's too a la carte.
    • We own Cofense and PhishMe currently and there are some gaping holes that require additional licensing to close.
    Incentivized
    Read full review
    OpenText
    • It is slow comparing to any other SIEM Tool.
    • We have to create filter for each alerts need some custom filter .
    • Here we dont have any single tab for see all the alerts .also need some attractive features for dashboard.
    Incentivized
    Read full review
    Likelihood to Renew
    Cofense
    Cofense is stable and provides easy to use solution to aid the investigation of emails as well as managing simulated phishing campaigns.
    Incentivized
    Read full review
    OpenText
    No answers on this topic
    Usability
    Cofense
    The interface is easy and intuitive.
    Incentivized
    Read full review
    OpenText
    Overall, it is a good investment in order for an organization to stay compliant and stay secure from all the wild things happening. It is definitely a cost effective tool with some good features including correlation, log storage, reporting and dashboards. If a customer is looking for advanced set of features, then I would highly not recommend this.
    Incentivized
    Read full review
    Reliability and Availability
    Cofense
    We've experienced zero downtime.
    Incentivized
    Read full review
    OpenText
    No answers on this topic
    Performance
    Cofense
    No slowness seen.
    Incentivized
    Read full review
    OpenText
    No answers on this topic
    Support Rating
    Cofense
    No answers on this topic
    OpenText
    I personally haven't reached the support team, however, the engineers never complained about the Arcsight support team. We had some issues with the tool in the past but every time we reached the support, all issues were resolved in a timely manner.
    Incentivized
    Read full review
    In-Person Training
    Cofense
    Training was through, relevant and easy to follow.
    Incentivized
    Read full review
    OpenText
    No answers on this topic
    Alternatives Considered
    Cofense
    The other product had a lot of fails on the auto-processing and did not integrate well with our current environment. One issue had to do with the way it sends the submissions to its processing engine—our email gateway configuration would have blocked this traffic. I also did not like the user interface.
    Incentivized
    Read full review
    OpenText
    Multiple platforms are already supported by Arcsight. Support is good. Scripts can be used to get data from multiple threat intel sources & the same can be used in correlation rules to detect any suspicious activity. Reporting features are good & you can check any backdated information within new clicks.
    Incentivized
    Read full review
    Scalability
    Cofense
    We've experienced zero downtime
    Incentivized
    Read full review
    OpenText
    No answers on this topic
    Return on Investment
    Cofense
    • Due to the integration potential, large amounts of time are saved on a daily basis.
    • Incident response time has dropped due to the increased information available by having access to phishing emails directly.
    • Staff are able to effectively learn how multiple tools in our environment are used by mastering Triage. This has decreased training time greatly and increased the effectiveness of each associate.
    Incentivized
    Read full review
    OpenText
    • Logger helps us to decrease incident response times.
    • It also decreased our project times with the man/day calculations. Before this solution, it may take up to 10 men/days to do something. After this, it becomes nearly half of the time.
    Incentivized
    Read full review
    ScreenShots

    Cofense Triage Screenshots

    Screenshot of Triage DashboardScreenshot of Triage Dashboard Cluster DetailsScreenshot of Triage Cluster DetailsScreenshot of Triage Cluster Malicious AttachmentScreenshot of Triage Cluster HeadersScreenshot of Triage Reporter Details