Lacework vs. Proofpoint Advanced Threat Protection

Lacework is well suited for behavioral analysis. One thing to consider thought is in the early stages there will be quite a bit of noise generated by Lacework. There will be a higher volume alerts generated initially - until a good baseline is generated. Overall Lacework is good with alert handling - integration with Slack is good.

Incentivized

Proofpoint is definitely not for smaller organizations. I don't think that the price point and feature set is designed for that, but it is definitely for organizations that have upwards of 100 or more mailboxes that need to be monitored and protected. We do think that our organization is right in the Proofpoint sweet spot of 200+ mailboxes.

Incentivized

• Easy to set-up the agent in cloud workloads.
• Easy integration with ticketing and messaging tools.
• Detailed visibility of all our container workloads across multiple accounts.

Incentivized

• Identify suspicious emails
• Categorizing various threats

Incentivized

• UI can be complicated and hard to know where to click to find information.
• Ability to create and manage cases or tickets from events that trigger.

• There isn't a convenient one-source portal area yet for all Proofpoint products if you utilize more than one.
• Our servers can sometimes be slow when loading pages, after placing tickets if the speeds go back up, support doesn't really do a deep dive on what's happening.

Incentivized

Proofpoint offers a lot of products, but they are not particularly well integrated. They all look different, and there is no central location to access them all from, which is disappointing. However, I do know they have a big push for upgrading the UI and usability, so this should improve in the coming months I hope.

Incentivized

Support supplies quick turnaround and professionalism.

Incentivized

Compared to Sysdig Falco (the free open-source IDS), Lacework helps security teams by providing actionable alerts and a user-friendly interface that gives you an overview of all workloads being monitored, and detailed insights into these workloads if needed. Falco requires you to build your own integration and interface around it, including a mechanism to whitelist certain alerts. This made it harder for the security team to focus their time on potential intrusions.

Incentivized

We use Proofpoint Threat Protection in conjunction with Microsoft 365. While Microsoft does have some very nice email security features that are getting better every day, we do think that Proofpoint is a value add and have no inclination to discontinue use or look for another product at this time.

Incentivized

• Being a FinTech company, financial institutions who partner with us want to know that we are appropriately maintaining a Security, Risk and Compliance program that maintains a level of comfort for their vendor management. Lacework gives us the ability to monitor and maintain a level of security for our infrastructure that puts our partners at ease, reduces the revenue cycle for new partners and opens doors to the future.

• Blocking suspicious emails preventing threats.
• Being able to identify trends when it comes to threats coming into our environment.

Incentivized