Ivanti Security Controls vs. Lacework

Security Controls is particularly suitable for customers who are looking for a patch solution and need security to protect themselves from unknown malicious code. For customers who are already using the Workspace Manager Suite, we don't think the solution is that suitable. A patch for Windows would be sufficient.

Lacework is well suited for behavioral analysis. One thing to consider thought is in the early stages there will be quite a bit of noise generated by Lacework. There will be a higher volume alerts generated initially - until a good baseline is generated. Overall Lacework is good with alert handling - integration with Slack is good.

Incentivized

• Live status update on patch deployments with an agent and also agentless deployments.
• A large 3rd party patching inventory.
• Easy to navigate and troubleshoot.

Incentivized

• The detailed visibility of all our container across multiple accounts is great.
• Anomaly-based detection allows us to focus our efforts and time on other events. Integrations with Jira, Slack, etc. are very easy to set up.
• The lacework team is very helpful before and during purchase.

• Better search in the application control configuration
• User rights management for modern user interface settings dialog.
• For patching, a more intuitive console. Some features are hidden or not easy to find for users who are accessing the console for the first time.

• Not all runtime behaviour alerts offer enough data to decide whether or not something is malicious. Having even more data (e.g., what process is doing a specific action) would help.

Incentivized

Support wasn't used as the cost didn't justify the expense. We have yet to use the support.

Incentivized

Ivanti allowed for the most control without using agent deployments. Ivanti also has the largest 3rd party patching. Easy to use.

Incentivized

Compared to Sysdig Falco (the free open-source IDS), Lacework helps security teams by providing actionable alerts and a user-friendly interface that gives you an overview of all workloads being monitored, and detailed insights into these workloads if needed. Falco requires you to build your own integration and interface around it, including a mechanism to whitelist certain alerts. This made it harder for the security team to focus their time on potential intrusions.

Incentivized

• Reduced amount of operating hours for administration of patching.

Incentivized

• Being a FinTech company, financial institutions who partner with us want to know that we are appropriately maintaining a Security, Risk and Compliance program that maintains a level of comfort for their vendor management. Lacework gives us the ability to monitor and maintain a level of security for our infrastructure that puts our partners at ease, reduces the revenue cycle for new partners and opens doors to the future.