Datadog vs. RackFoundry Total Security Management (discontinued) vs. Securonix Next-Generation SIEM

Datadog works really well with complex microservices architecture like any E-commerce platform which will be having multiple services but they all are interdependent to others so in this scenario Datadog will be best to monitor these as it will show the transactions also between those microservices. If you are using multiple services in your architecture whether it will be cloud services or on prem services Datadog will be the best choice to monitor all those service with in Datadog so that you can see everything in a single place. But if you are having small architecture and few services in that then in that scenario you can use Datadog but it will be little costly as compared to other but obviously the features are very well.

Incentivized

I would not recommend RackFoundry to any company whatsoever. At first it seems like a viable solution for the cost. Offering SOC monitoring, implementation and deployment all-in-one seems like a great deal. However it all falls apart when push comes to shoves. As it currently stands we are just over a year into our deployment. All we have to show for it is a fancy web app that does not display any information. In the year that this deployment has been ongoing it has taken us a few months just to get the virtual appliance installed. Then it was another few months of back and forth until we finally got credentials. Then when I finally logged in we began the process of deploying agents and began collecting data. Shortly afterward things began to stall to where they are now. We faced major issues with the web app, scans were not running, assets were not reporting in and data and reports were not being generated. After doing some more research and googling I realized that we were not alone with these issues. Countless other reports from companies who have had similar issues to ours. Each time I ask when the issues were going to be resolved, I got the same answer every time: "The next release should fix the issues you have been experiencing", only for the next release to come, and the issues remain.

The best part of Securonix is it's architecture which makes it scalable and allows it to add any new feature to match the requirement. Securonix is well suited for enterprises who are mid to large size and are looking for a quick time to value, do not want to put upfront capex and invest less on the service layer. It becomes little costly for a small sized organisation.

Incentivized

• Create Dashboards as per application, environments, and Custom metrics in one panel.
• Log aggregation, one-stop Application monitoring tools for the whole infrastructure.
• Playbooks, SLA definition, success and error quotas, request visualizations.
• DB monitoring, Serverless stack monitoring.
• Alerting of Production incidents so we can quickly resolve the issues on time.

Incentivized

• All-in-one solution that covers all the essentials and basic of security needs
• Unique methodology way for cost effective enterprise security solution
• Help exceed compliance as their interface allows you to tailor your compliance needs
• Simple and friendly customizable user interface dashboard
• Unique function: Ask an Expert
• Premium fully manage automatic updates with access
• Deployable Security Modules that encompass IPS/IDS/SIEM/VA/FW
• Knowledgeable engineers, who helped improve our overall infrastructure by making it more secure

• Collect data from just about any log source.
• Provides lightning fast searching across large data-sets.
• Provides in-depth analytics across both micro and macro time frames using threat models.

• Alert windows cause lag in notifications (e.g. if the alert window is X errors in 1 hour, we won't get alerted until the end of the 1 hour range)
• I would appreciate more supportive examples for how to filter and view metrics in the explorer
• I would like a more clear interface for metrics that are missing in a time frame, rather than only showing tags/etc. for metrics that were collected within the currently viewed time frame

Incentivized

• Product they offer does not work.
• Time to implement is unbelievably long.
• Services they offer are so far, non-existent.

• There is a steep learning curve for the platform.
• Developing your own analytics can be challenging due to the depth and complexity of the analytics engine.

Definitely will not revisit after our issues and, in my opinion, poor support.

Incentivized

There is some room for improvement, but the Datadog team sends out updates frequently, and the UI is user-friendly for engineers, with no significant loading issues or region-specific problems. That was one of the key reasons we preferred Datadog; our company has employees worldwide, and it wasn't difficult to transition to the tool.

Incentivized

Securonix Next-Generation SIEM provides loads of features that can be utilized as per business requirements. With the Securonix Jupyter update, the feature set is fine tuned for efficient implementation. The SOAR platform will complete the product for automated response on top of the alerting capabilities. The primary factor for selecting a SIEM will include the support model. While implementing and currently using Securonix Next-Generation SIEM in our environment, we have experienced the best support provided by the SIEM team in all aspects.

Incentivized

The support team usually gets it right. We did have a rather complicate issue setting up monitoring on a domain controller. However, they are usually responsive and helpful over chat. The downside would be I don’t think they have any phone support. If that is important to you this might not be a good fit.

Incentivized

Securonix acts with urgency to support day to day operational issues & queries and shows a real commitment to us as a partner. I rate this an 8 because there are still some bumps in the road, instances where communications can be sparse or unclear.

Incentivized

Documentation was difficult to work through, rollout was catastrophic (completely outage)

Incentivized

Datadog is a more complex but complete solution than any of the other Log Aggregation, monitoring, or general observabilty tools that we have trialed. I found it easier to setup following useful and up-to-date documentation provided directly by Datadog instead of scattered around many blogs or articles. I would love to have my own Grafana + Prometheus expert to setup all the peices we need but you're paying for expertise there instead of an experience with Datadog.

Incentivized

Well I have experience with the big names: SecureWorks, IBM and Splunk. Individually their logging tools are much better than RackFoundry's Total Security Management. This is great for large corporations and urban cities, however not so great for municipalities, mid size businesses and companies who fluctuate between 1-7 members on their IT staff. Why? Because it takes too much of their resources and integration with other products gets a little rough as you will need to configure your preferences to theirs. When a company has stability it is great to have a name brand product, however renewals and upgrade costs can be taxing to an organization.

• Saved us (time & money) from developing our own monitoring utilities that would pale in comparison
• Alerts allow us to remedy issues before our customers even know about them
• Tracking resource usage over time allows us to better plan for future needs, before it becomes a pain-point.

Incentivized

• Just knowing that we are protected from attacks is our main objective and so far that sense of security is well worth the cost associated with it.

• Securonix Next-Generation SIEM has reduced the amount of overhead required for environment monitoring by 15%!