Lacework vs. Qualys TotalCloud

Lacework is well suited for behavioral analysis. One thing to consider thought is in the early stages there will be quite a bit of noise generated by Lacework. There will be a higher volume alerts generated initially - until a good baseline is generated. Overall Lacework is good with alert handling - integration with Slack is good.

Incentivized

We have found Qualys TotalCloud useful to track down and identify specific files or packages, which helped us to verify that the solution we had implemented was successful. It also helped us do identify false positives, since the paths of the files are included in the Qualys TotalCloud details, so we could see if files were just and set of old install files.

Incentivized

• Easy to set-up the agent in cloud workloads.
• Easy integration with ticketing and messaging tools.
• Detailed visibility of all our container workloads across multiple accounts.

Incentivized

• UI can be complicated and hard to know where to click to find information.
• Ability to create and manage cases or tickets from events that trigger.

After installing Qualys TotalCloud, it was just a matter of initiating a service or daemon and it continues to run. There is no maintenance or special monitoring needed. Qualys TotalCloud seamlessly reports the required information to Cisco Security and all we need to do is check the Cisco Security interface for any vulnerabilities that we need to address.

Incentivized

Compared to Sysdig Falco (the free open-source IDS), Lacework helps security teams by providing actionable alerts and a user-friendly interface that gives you an overview of all workloads being monitored, and detailed insights into these workloads if needed. Falco requires you to build your own integration and interface around it, including a mechanism to whitelist certain alerts. This made it harder for the security team to focus their time on potential intrusions.

Incentivized

• Being a FinTech company, financial institutions who partner with us want to know that we are appropriately maintaining a Security, Risk and Compliance program that maintains a level of comfort for their vendor management. Lacework gives us the ability to monitor and maintain a level of security for our infrastructure that puts our partners at ease, reduces the revenue cycle for new partners and opens doors to the future.

• Allowed me to resolve vulnerabilities so that none of our servers have high-priority vulnerabilities.
• Keeping our own environments safe also ensures that our customers' environments are safe.
• Using the Qualys TotalCloud details reported on our servers allows us to assist customers in resolving their vulnerabilities that they ask us for assistance with resolving.

Incentivized