Lacework vs. Tenable Cloud Security

Lacework is well suited for behavioral analysis. One thing to consider thought is in the early stages there will be quite a bit of noise generated by Lacework. There will be a higher volume alerts generated initially - until a good baseline is generated. Overall Lacework is good with alert handling - integration with Slack is good.

Incentivized

In its current version, it is basic. There are nice new features that should provide a good overall picture of the configuration and security of the account.

Incentivized

• Easy to set-up the agent in cloud workloads.
• Easy integration with ticketing and messaging tools.
• Detailed visibility of all our container workloads across multiple accounts.

Incentivized

• Easy to connect to cloud account
• Provides basic configuration details or account, networking, what's public

Incentivized

• UI can be complicated and hard to know where to click to find information.
• Ability to create and manage cases or tickets from events that trigger.

• Difficult to attribute the vulnerabilities to the correct instance - cloud is too dynamic. Is supposed to be fixed in new version - we will see.

Incentivized

Compared to Sysdig Falco (the free open-source IDS), Lacework helps security teams by providing actionable alerts and a user-friendly interface that gives you an overview of all workloads being monitored, and detailed insights into these workloads if needed. Falco requires you to build your own integration and interface around it, including a mechanism to whitelist certain alerts. This made it harder for the security team to focus their time on potential intrusions.

Incentivized

We looked at this over a year ago, the space was still young. Censys provided what we originally needed, but was soon outdone by Tenable with their initial release. I am sure that Censys improved as well, but it was easier to expand on our current Tenable license.

Incentivized

• Being a FinTech company, financial institutions who partner with us want to know that we are appropriately maintaining a Security, Risk and Compliance program that maintains a level of comfort for their vendor management. Lacework gives us the ability to monitor and maintain a level of security for our infrastructure that puts our partners at ease, reduces the revenue cycle for new partners and opens doors to the future.

• Being a Tenable One customer - these are just new features we suddenly own. As long as you have the asset count available

Incentivized