Ivanti Security Controls vs. Lacework

Agentless patching is the best of all the products I've used. The real-time updates that don't require re-scanning after each step is great.

Incentivized

Lacework is well suited for behavioral analysis. One thing to consider thought is in the early stages there will be quite a bit of noise generated by Lacework. There will be a higher volume alerts generated initially - until a good baseline is generated. Overall Lacework is good with alert handling - integration with Slack is good.

Incentivized

• Trusted ownership checking is a good way to implement effective basic protection.
• Patching is important today to react quickly to security problems. With Security Controls, it's easier than ever before.
• One console for whole security.

• Easy to set-up the agent in cloud workloads.
• Easy integration with ticketing and messaging tools.
• Detailed visibility of all our container workloads across multiple accounts.

Incentivized

• Performance of the console when using agentless machines.
• The console layout is a bit cumbersome - would be better if all functions were accessible from one screen.
• Common deployment examples to assist with deployment types.

Incentivized

• UI can be complicated and hard to know where to click to find information.
• Ability to create and manage cases or tickets from events that trigger.

Support wasn't used as the cost didn't justify the expense. We have yet to use the support.

Incentivized

Since we have been using Application Control for about 15 years, it is, of course, the best solution for us. We also looked at other products (RES One Workspace), but they didn't convince us. Some features of RES were good and are now part of the User Workspace Manager. The Microsoft solution seems too complicated to us and does not have the advantages of Trusted Ownership Checking.

Compared to Sysdig Falco (the free open-source IDS), Lacework helps security teams by providing actionable alerts and a user-friendly interface that gives you an overview of all workloads being monitored, and detailed insights into these workloads if needed. Falco requires you to build your own integration and interface around it, including a mechanism to whitelist certain alerts. This made it harder for the security team to focus their time on potential intrusions.

Incentivized

• Reduced amount of operating hours for administration of patching.

Incentivized

• Being a FinTech company, financial institutions who partner with us want to know that we are appropriately maintaining a Security, Risk and Compliance program that maintains a level of comfort for their vendor management. Lacework gives us the ability to monitor and maintain a level of security for our infrastructure that puts our partners at ease, reduces the revenue cycle for new partners and opens doors to the future.