Lacework vs. Trend Micro Cloud One

Lacework is well suited for behavioral analysis. One thing to consider thought is in the early stages there will be quite a bit of noise generated by Lacework. There will be a higher volume alerts generated initially - until a good baseline is generated. Overall Lacework is good with alert handling - integration with Slack is good.

Incentivized

Scenarios where it's well suited - 1) AWS cloud environments where application security and ZTN is a must. 2) One-stop-shop for centralized discovery of apps/workloads. 3) Custom reporting client needs. 4) CI/CD pipeline - easy to design DevOps cycles.

Incentivized

• The detailed visibility of all our container across multiple accounts is great.
• Anomaly-based detection allows us to focus our efforts and time on other events. Integrations with Jira, Slack, etc. are very easy to set up.
• The lacework team is very helpful before and during purchase.

• Easy integration with AWS environment
• holistic protection - workload and network security
• Monitoring capabilities - SIEM tools which helps in RCA analysis.

Incentivized

• Not all runtime behaviour alerts offer enough data to decide whether or not something is malicious. Having even more data (e.g., what process is doing a specific action) would help.

Incentivized

• Granularity control over Agentless deployment
• Alibaba Cloud Support
• Technical Support

Incentivized

Compared to Sysdig Falco (the free open-source IDS), Lacework helps security teams by providing actionable alerts and a user-friendly interface that gives you an overview of all workloads being monitored, and detailed insights into these workloads if needed. Falco requires you to build your own integration and interface around it, including a mechanism to whitelist certain alerts. This made it harder for the security team to focus their time on potential intrusions.

Incentivized

Trend Micro Cloud One security supports the hybrid Infra. It can be integrated with public Cloud as well as Private cloud. It's an all in one solution which gives the flexibility to manage our Clouds, Workloads, Containers, Dockers etc. It protects against zero day attacks using next gen technology like Behaviour Analysis and Machine learning.

Incentivized

• Being a FinTech company, financial institutions who partner with us want to know that we are appropriately maintaining a Security, Risk and Compliance program that maintains a level of comfort for their vendor management. Lacework gives us the ability to monitor and maintain a level of security for our infrastructure that puts our partners at ease, reduces the revenue cycle for new partners and opens doors to the future.

• Application control and security
• United management for Hybrid Cloud
• Complied to regulatory like GDPR, PCI DSS

Incentivized