Elastic Security vs. IBM Guardium

I believe Endgame is well suited to organizations that have their own Cybersecurity department. Its not well suited for organizations that don't have a Cybersecurity department.

Incentivized

IBM Guardium DP is suitable for monitoring, auditing, data discovery, vulnerability analysis, and risk detection and investigation in relational and non-relational databases, cloud database services, indexed databases, and non-relational databases as well. IBM Guardium DPR is appropriate for supporting the process of detecting anomalous behavior in accessing sensitive data, helping to optimize the work of cybersecurity analysts or data team analysts by providing the data officer within our organization with insight into compromised users, compromised databases, or file servers containing sensitive data.

• Identify 0-day malware.
• Provides a few forensic details on endpoints.
• Very easy to administer.

Incentivized

• Provides complete monitoring of data access and usage activities.
• Provides customizable security controls and policies that help us meet compliance and regulatory requirements.
• Uses advanced algorithms and machine learning to detect abnormal behavior patterns.
• Helps us protect sensitive and confidential data by controlling access.
• Integrates easily with other security systems and tools.

Incentivized

• I would love that it provided more memory analysis details.
• Being able to edit sensor profiles after creating them.
• I would love it if it provided more automation features.

Incentivized

• Cleanup the menu bar- way too many items.
• Ktap support for newer O/S. Recently, I have had to open support tickets to get the most recent support for the RHEL Kernel.
• Also, upgrading agents to V12 doesnt not have the same Flex or exact match for KTAP as 11.5. You would think V12 would have the same Kernel support as 11.5. Clients are moving to V12.

Incentivized

It is a perfect system to detect problems that we do not see manually, it is light, with a very simple learning curve and with great protection of our data, we will use it forever.

Incentivized

This software is not the easiest to use in all work environments, each department has some difficulties accessing and managing some functions, it can be considered a complex softy, but I consider it necessary to have it in the company due to its security qualities of warm cans, it offers exactly what it promises but with a little difficulty in its configuration.

Incentivized

Even though their support is good, I think there are some areas where they need to provide more thorough solutions to issues, some of their solutions are pretty basic and have already been tried.

Incentivized

There has been great support coming from IBM. It is easy to use and a great way to keep our data secure. I would recommend this to other possible users and if I were to move companies, I would recommend we use this there too. Thank you

Incentivized

Endgame is based on the MITRE framework which has proven to be a successful framework to identify various attack patterns that attackers use. Also, compared to the others it's easier to administer and manage.

Incentivized

IBM Security Guardium has extended capabilities of automatically locating databases and assessing the vulnerabilities and configuration flaws in them. IBM Security Guardium stacks up against other products due to the additional features that can be easily added to your IT systems after installation. Additionally, Guardium has the ability to monitor a mainframe database environment which makes it the best choice!

Incentivized

Only a few users in our shop for now

Incentivized

• Being able to identify threats we couldn't identify before.
• Easier management of endpoints.
• Being able to immediately isolate endpoints remotely that have high severity threats.

Incentivized

• Security and monitoring are important in a financial institution
• Constant visibility and auditing of companies is easy with IBM Guardium.
• la seguridad y monitored es important en una entidad financiera
• la visibilidad y auditoria constante de empresas es facil con IBM Guardium

Incentivized