ReliaQuest GreyMatter vs. Trustwave Managed Detection and Response

Our company generates more than a terrabyte of log a day and it can easily go above 2 TB a day. We were using out of the box SOC Solution from splunk to manage our SOC. We lacked the know how of using splunk and also lacked the staff to keep the product up to date to help us tackle the latest threats. We outsourced our SIEM/SOAR service to RQ and they helped us with creating new use cases which addressed the latest threat to our organization. RQ has people who research the latest threats and helps us keep up to date on the day-to-day security operations. RQ also helps with data onboarding if required. So we would recommend RQ to customers who are short-staffed and who lack personnel who could research security threats to keep your organization safe from threat actors.

Incentivized

The company has become a true believer in Trustwave services because they ensured the solution we implemented addressed our specific requirements. Adopting this platform provided significant improvement in visibility with a user-friendly dashboard and now the company can take greater control internally when investigating an alert and analyzing data over time

Incentivized

• SOC service.
• Managed services.
• Correlation searches.

Incentivized

• Manages and monitors traffic to provide security
• Reports in timely manner on all incidents
• Web portal access to review reports and suggestions

Incentivized

• Some Analysts are relatively fresh to SOC. They sometimes get put into supporting large infrastructures.
• RQ has a ton of correlation searches that they use to provide end-to-end visibility. Most of them can be restructured to get the same results and this can reduce the number of correlation searches.

Incentivized

• There is no option to include rules type functions, which would be very useful to save configuration time.
• The support is not as helpful as I would like, nor its documentation.
• A friendly graphical interface would be very well accepted.

Incentivized

Reliaquest is vendor agnostic. They have a lot of correlation searches that they use to provide security for your organizations. Compared to other products we have tried we felt that they are the only company that is doing proper market research on the latest and greatest threat to our vertical and coming out with the latest methods to keep up to date. RQ also has a good leadership structure that we could rely on if we run into any escalations. Compared to other products that we tried they try to work with you holding hands trying to resolve your problems.

Incentivized

We have not really looked at other products.

Incentivized

• RQ's Greymatter content has enriched our SOC experience because we always felt Splunk's out-of-the-box use cases were not sufficient enough to provide end-to-end coverage.
• RQ specializes in a lot of big data solutions so that we can rely on them to help us troubleshoot tasks and also make sure our security solutions are working accurately.

Incentivized

• Protects valuable data and defends against increasingly sophisticated threat actors
• We have achieved increase in customer trust and distinguished the company from our main rival
• Freed the company's roughly 10 employees to focus on expanding the business internationally

Incentivized