Lacework vs. ManageEngine Patch Manager Plus

Lacework is well suited for behavioral analysis. One thing to consider thought is in the early stages there will be quite a bit of noise generated by Lacework. There will be a higher volume alerts generated initially - until a good baseline is generated. Overall Lacework is good with alert handling - integration with Slack is good.

Incentivized

If you are managing a very large number of computers, I would say 1000+, the standard patching tools provided by Microsoft will fail to do their job properly. This is where you will benefit from ManageEngine PATCH MANAGER Plus, being agent-based it is fast, easy to manage, and reliable. If you require functionality more than just patching, like security auditing, you have to look elsewhere.

Incentivized

• Easy to set-up the agent in cloud workloads.
• Easy integration with ticketing and messaging tools.
• Detailed visibility of all our container workloads across multiple accounts.

Incentivized

• All the patches are tested before delivered to us.
• It's on cloud so we does not need to maintain Hardware and Network.
• It also upgrades the hardware drivers & BIOS. But for BIOS only we use monthly updates no automatic policy just push to target computers.

Incentivized

• UI can be complicated and hard to know where to click to find information.
• Ability to create and manage cases or tickets from events that trigger.

• Would like to be able to still install patches that are older than 3 months
• Would like to be able to upload our own installers, but understand this is part of endpoint central

Incentivized

The support team at Patch Manager Plus has been awesome. Very responsive and knowledgeable. There are times when there is confusion between different tickets but there is still good service.

Incentivized

Compared to Sysdig Falco (the free open-source IDS), Lacework helps security teams by providing actionable alerts and a user-friendly interface that gives you an overview of all workloads being monitored, and detailed insights into these workloads if needed. Falco requires you to build your own integration and interface around it, including a mechanism to whitelist certain alerts. This made it harder for the security team to focus their time on potential intrusions.

Incentivized

SolarWinds was not selected because it runs on top of
SCCM which in itself is problematic and unreliable. We need an application that
runs in standalone mode and does not rely on any other application. SolarWinds
is also one of the most expensive. Kaseya and GFI LanGuard are overkill as they contain
functionality that we do not need or already have. GFI LanGuard for instance
does security auditing the same as Qualys that we already have. Kaseya is a full
management and automation solution.

Incentivized

• Being a FinTech company, financial institutions who partner with us want to know that we are appropriately maintaining a Security, Risk and Compliance program that maintains a level of comfort for their vendor management. Lacework gives us the ability to monitor and maintain a level of security for our infrastructure that puts our partners at ease, reduces the revenue cycle for new partners and opens doors to the future.

• It has saved engineers so much time when monitoring patching out of hours.
• We no longer need to log into each individual server to patch it if it's failed, it can all be done from inside ManageEngine Patch Manager Plus itself.

Incentivized