Cybereason Defense Platform vs. Proofpoint Targeted Attack Protection (TAP)

Cybereason is good at detections and has some false positives, but when we need their support, it's too slow. My team used to test Cybereason, submitting lots of malware and threats, trying to find problems, and for research purposes. In my experience, every time we found a bug, their support team denied the problems and took lots of weeks to give some answer when we insisted.

Incentivized

I think it is well suited for any organization. It truly gives good insight on the email campaigns that are hitting your company, as well as the people that are being targeted the most and also VIP users such as executives or even other people in IT, cyber, or administrators.

Incentivized

• EDR
• Threat hunting
• anti-malware
• collecting telemetry

Incentivized

• TAP allows administrators and authorized users to effectively analyze threats and identify all targets.
• The tracking (did a user open an email, did they click a link and how many times) and analytics are a great asset to have for any IT admin.
• The ability to flag specific users as VIPs or important folks you want to keep an extra measure of attention on.

Incentivized

• Slow support
• Bugs on their interface
• Log extraction

Incentivized

• Their admin web GUI is cumbersome and unclear in many ways. The learning curve is steep so you have to stay up on things yourself whenever a new feature or service is added.
• They sometimes add a feature to their toolbox without informing their customers. This is true even when the feature added does not cost extra.

Incentivized

Not my decision, but I have made it very clear this product does not perform. I have emails from our users on how bad it is after switching to it.

Incentivized

The interface is simple to use but still contains the information needed to conduct thorough investigations. If you own licenses for other Proofpoint tools, Proofpoint Targeted Attack Protection is easily accessible from those applications. The ability to sandbox URLs within the TAP interface is a great feature as well. The overall performance of the GUI is seamless, especially if enabled with your organization's SSO.

Incentivized

Generally have had good response and resolution time with knowledgeable technicians, and if needed the ticket is moved to someone with more expertise to better address the issue. Have used the ticketing portal, phone, as well as the beta chat feature (permanent please!)

Incentivized

Proofpoint managed the installation and made it very simple. We had a dedicated installation engineer who checked in on use periodically after go-live to ensure that there were no issue.

Incentivized

Cybereason provides superior protection than either Microsoft or CrowdStrike and a better TCO. We receive less false positives than with Microsoft Defender and Cybereason is easier for level 1 users to use.

Incentivized

While both Abnormal Security and Proofpoint Targeted Attack Protection are email-based security applications, they each have their specific strengths. Abnormal is a great "first line of defense" with its machine learning capabilities and proactively blocking malicious or spam emails. Proofpoint Targeted Attack Protection is for when applications like Abnormal Security fail and let malicious phishing emails through.

Incentivized

• Helps on threat hunting
• MalOps is very good
• When we face a bug, it takes too much time for them to respond

Incentivized

• The cost associated with a successful threat (such as a spoofed wire transfer) far exceeds the cost of the Proofpoint TAP system.
• It is hard to quantify the actual amount saved by threats that TAP has prevented, but I feel that it is an excellent value (and piece of mind).
• The TAP saves us money and increases productivity by reducing the amount of malicious and SPAM emails.

Incentivized