Lacework vs. Trellix Cloud Workload Security

Lacework is well suited for behavioral analysis. One thing to consider thought is in the early stages there will be quite a bit of noise generated by Lacework. There will be a higher volume alerts generated initially - until a good baseline is generated. Overall Lacework is good with alert handling - integration with Slack is good.

Incentivized

Suitable scenario: The McAfee Cloud Workload Security console has helped me a lot in saving physical resources. We no longer have to have a server and spend resources to maintain the console, everything is in the cloud. Unsuitable scenario: After the change to the cloud the McAfee Cloud Workload Security reduced many things that were made very easy when it was on a physical server. Active directory server integration with the console is a bit tricky. That should be improved and be somewhat more friendly when connecting to be able to migrate user machines.

Incentivized

• Easy to set-up the agent in cloud workloads.
• Easy integration with ticketing and messaging tools.
• Detailed visibility of all our container workloads across multiple accounts.

Incentivized

• Monitoring of detected threats
• Checking the status of antivirus agents
• Monitoring of antivirus software installed

Incentivized

• UI can be complicated and hard to know where to click to find information.
• Ability to create and manage cases or tickets from events that trigger.

• Improve integration with windows server active directory.
• The monitoring of the implementation of missing components of the antivirus should be improved.

Incentivized

Compared to Sysdig Falco (the free open-source IDS), Lacework helps security teams by providing actionable alerts and a user-friendly interface that gives you an overview of all workloads being monitored, and detailed insights into these workloads if needed. Falco requires you to build your own integration and interface around it, including a mechanism to whitelist certain alerts. This made it harder for the security team to focus their time on potential intrusions.

Incentivized

We use McAfee Endpoint Security on user PCs and I must say that it is an excellent antivirus. The alerts we have had have been resolved without any problem. I totally recommend it.

Incentivized

• Being a FinTech company, financial institutions who partner with us want to know that we are appropriately maintaining a Security, Risk and Compliance program that maintains a level of comfort for their vendor management. Lacework gives us the ability to monitor and maintain a level of security for our infrastructure that puts our partners at ease, reduces the revenue cycle for new partners and opens doors to the future.

• Improved resource savings in terms of physical infrastructure.

Incentivized