ThreatCure® ShieldOps Platform vs. Splunk On-Call

ThreatCure Guardian Care services enable us to block C&C connections from some of our infrastructure systems. They told us that they had seen lateral movements in the early stages, which may indicate a ransom attack. They later provided us with a comprehensive report detailing the threat actors who were utilizing an insider threat in this.

I recommend Splunk on-call is more suited where there are high incident queues; multiple teams need to be involved in handling a P1 severity issue. Multiple levels of escalation are needed environment where automated action is required. I recommend the solution for large-scale & medium-scale business units. For small-scale business units, I see the functional value is less.

Incentivized

• Indepth knowledge of our infrastructure
• Complete Threat Landscape view
• Early detection of threats

• Easily assign work/tickets between multiple users
• Supports a wide variety of software integrations
• Easy to manage scheduling tool
• As part of the Splunk toolset, provides detailed levels of data analysis at our engineers fingertips

Incentivized

• Would suggest ThreatCure red-teaming services.

• The user interface can be furthe improved
• Licensing needs to be simplified and packaged as a bundle with other Splunk product like Enterprise Security
• Customer outreach can be further enhanced

Incentivized

It was a good solution with a good comprimise prize/features for our use cases

Incentivized

Good usability, it could be improved

Incentivized

VictorOps support has proven excellent for us. Because it is such a widely used tool, there is a lot of documentation on usage, and a large community of users to lean on. Also, many engineers have had experience working with VictorOps already, and the tool is so easy to setup / manage that much support isn't really necessary.

Incentivized

It was a good solution with a good comprimise prize/features for our use cases

Incentivized

While some items offer perfect sight, others fall short in other respects. The ThreatCure ShieldOps platform provides our management and incident response team with a 360-degree perspective. This facilitates quicker decision-making for the future. Furthermore, ThreatCure has an opex model, but other suppliers require significant Capex investments, which is an added advantage of SMB organization like us.

Splunk On-Call integrates better with our Splunk Cybersecurity and Reporting products due to the same family tree of the same eco system. We were previously using built-in on-call from individual applications and while adequate, they were difficult to manage and support SLA varied greatly across different applications. In addition we also used xMatters which did not integrate well with SAP products nor Citrix products so we were still using more than a single on-call product which was solved by implementing Splunk On-Call

Incentivized

• Now with lesser opex we are getting complete visibility.
• Now would like to acquire Threat Cure Guardian Care Services

• It runs our on call rotation so it makes it easy for us.
• It integrates with Slack so it makes it easy for us to manage through Slack.

Incentivized