AgileBlue

Score8.4 out of 10

25 Reviews and Ratings

What is AgileBlue?

AgileBlue's SecOps platform autonomously detects, investigates, and responds to cyber threats across endpoints, cloud, and network. AgileBlue is offered for the mid market, and for these companies is designed to deliver all-in-one protection, integration, and a partnership so organizations can move from reactive defense to proactive resilience.

Categories & Use Cases

Media

Screenshot of the AgileBlue main dashboard

Screenshot of AgileBlue internal risk scoring

1 / 5

Screenshot of the AgileBlue main dashboard

#1 most frequent

Professional, Scientific, and Technical Services

“The transition from SecureWorks to AgileBlue provided us a significant cost-savings and gave us a broader feature set.”
— Director of IT, Brennan, Manna & Diamond (Mid-sized Companies)

Pros

Rapid identification and response to security incidents
Effective communication and regular updates on security insights
User-friendly interface and flexible case management

Cons

Agent technical reliability concerns
Log data accuracy issues, including duplication and persistent alerts
Inconsistencies in the user interface

Brian Kleinfall View profile

IT Director in Information Technology at PRNPool.com / Medical Contracting Services (11-50 employees)

Use Cases and Deployment Scope

We are a small company with limited IT staff. AgileBlue is a single source solution that provides end point security and 10,000 foot overview of your corporate security. We have had a couple issues with processes being identified as malicious but with the help of support - we have whitelisted those. So initial setup you want to be cautious installing the agents.

The Nodeware part of the solution is very helpful for managing OS Updates and seeing vulnerabilities on your network. As well as the AI notifications of employee activities.

Overall, for a small IT team this has been a solid solution for us.

Pros

End point management
OS/Application Updates and Vulnerabilities
Notifications of possible IT related issues

Cons

Ability for IT to easily turn on/off blocking of apps/installations
Better OS Update integration - reporting - current status
Pricing - accurate license counts

Return on Investment

Peace of mind
Awareness of Employee Actions / Risks
High Level Review of OS Updates

Usability

Other Software Used

Veeam Data Platform

Erik Bishop

CRO in Sales at GTG Networks (11-50 employees)

Use Cases and Deployment Scope

We are an MSP utilizing AgileBlue for our end customers. AgileBlue takes the bulk of security ops off our teams plate and allows us to focus on helping solve traditional IT issues and gives us a partner to handle the bulk of the security issues. AgileBlue handles all alerts and escalates legitimate or potentially legitimate items to our team if needed.

Pros

AI platform is excellent at filtering the noise vs legitimate items.
Team is responsive and well informed
Platform is constantly evolving, recently added an AI shadow IT tool we like.

Cons

Email security responses have been slow on a couple occasions, they have addressed this with some Microsoft configuration changes for us.

Return on Investment

We lowered our SecOps cost by 35% by moving to them
We improved our response times by 22% over our previous more costly vendor

Usability

Alternatives Considered

Huntress and RocketCyber

Rich Crossley

Technical Engineer in Information Technology at OME-RESA (11-50 employees)

Use Cases and Deployment Scope

We use AgileBlue as a SIEM tonotify us of any actions that are taking place in our network. A few examples would be account creation, installing or uninstalling applications, or any other potential malicious activity.

Pros

Notifying us of potentially harmful events
The ease in which to respond to cases
Monthly meetings to update us on new features, etc.

Cons

Response Time
N/A
N/A

Return on Investment

It has made our network more secure
Gives us better insight into events that could potentially impact our network

Usability

Other Software Used

Notepad++, OneNote

Verified User

Director in Information Technology (5001-10,000 employees)

Use Cases and Deployment Scope

AgileBlue provides Managed Security Services, including L1 and L2 SOC, Threat Intelligence, Email Security, Vulnerability Management, and Security Engineering. It covers all security operations, integration with the company's L3 support, ingestion of SIEM logs, and includes additional services such as EDR licenses. The AgileBlue SOC engine runs on a proprietary AI platform that creates cases from logs and telemetry ingested by our platforms and provides periodic reports and KPIs.

Pros

Agentic SOC for L1 and L2 detection and case analysis.
EDR support included with their endpoint monitoring.
SIEM support with ingestion of multiple sources.

Cons

Vulnerability Management support.
Threat Intelligence process to cover specific markets.
Playbooks to automate incident responses.

Return on Investment

Positive: great support and TAM, less hassle with L1/L2 analysis, improved KPIs.
Negative: focus efforts on the Threat Intelligence process, which requires an additional tool to maintain adequate coverage.

Usability

Other Software Used

Google Threat Intelligence (Mandiant)

Verified User

C-Level Executive in Corporate (1-10 employees)

Use Cases and Deployment Scope

We use AgileBlue for basic MDR and also refer our clients to them for all things MDR and shadow AI monitoring. Usually we're trying to address a lack of fundamental security controls both on end user devices and in the cloud. We find that Cerulean slots into most modern environments, particularly Windows and O365 environments, very well and helps make up for the lack of personnel and maturity at our clients

Pros

Responds to feedback
Locking accounts for suspicious activity
EDR

Cons

SOC communication: Sometimes the alerts still leave too much to an overworked customer to analyze and investigate themselves
Missed/repeated requests: Removing an old employee from our system has been a chore. They're no longer in our portal, but we still received alerts on their machine for months after dropping them from the portal
It would be nice to have a "ground truth" dashboard where we can upload what computers are supposed to be reporting to do EDR deployment reconciliations.

Return on Investment

Running AgileBlue at our business allows us to attract more customers by practicing what we preach
AgileBlue has been great at catching threats we didn't see coming. It's also helped improve governance because alerts will remind us when we failed to communicate around security and administrative actions
Honestly, peace of mind. I sleep better knowing my internet-native team is protected and that random log-in attempts from certain regions are being stomped

Usability

Alternatives Considered

SentinelOne Vigilance, SentinelOne Purple AI, eSentire and CrowdStrike Falcon

eSentire

Rapid7 Managed Security Services (Rapid7 MDR)

Arctic Wolf Managed Detection and Response

CyberMaxx

AgileBlue

What is AgileBlue?

Categories & Use Cases

Media

Most Frequent Users

Professional, Scientific, and Technical Services

AgileBlue Reviews

Pros

Cons

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Usability

Other Software Used

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Usability

Alternatives Considered

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Usability

Other Software Used

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Usability

Other Software Used

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Usability

Alternatives Considered

AgileBlue Alternatives