AlienVault helped us achieve NIST cybersecurity compliance
June 30, 2019
AlienVault helped us achieve NIST cybersecurity compliance
Score 9 out of 10
Vetted Review
Verified User
Software Version
USM Anywhere (SaaS)
Overall Satisfaction with AlienVault USM
We use AlienVault as an integral part of our information security program. It is being used by the whole organization for threat detection, incident response, and compliance management. Helping us maintain NIST Cybersecurity compliance, the main features we use are asset discovery, vulnerability scanning, and intrusion detection. It has also helped implement forensics, log management, and user activity monitoring. AV helps us take a proactive approach to security as it automatically detects threats and keeps us updated so we can focus on mitigating risk and managing responses.
Pros
- Easily integrates with AWS cloud infrastructure.
- Provides an intuitive interface to analyze raw logs and investigate potential threats.
- Automates vulnerability scanning.
- Alerts to potential threats and intrusions.
Cons
- Raw logs are only available via the UI for the last 30 days. It would be great if you could choose to load archives into the system for investigation when needed.
- It would be awesome to have an implementation checklist to see how the different features map to various compliance frameworks like NIST.
- They were recently purchased by AT&T, so there is some confusion as to what serves are offered by AlienVault and what is AT&T Cybersecurity, who to contact about your account, etc. Growing pains. :)
- The documentation can be hard to use for security newbies. It covers the technical pieces, but not the why or how to use the different features and functionality. It could benefit from practical examples of AV in action.
While the price tag isn't cheap, AlienVault was probably the most affordable option that wasn't free and open source. Many of the competitors were either more expensive or didn't publish their prices at all, which probably means they are even more expensive. AlienVault also had some of the best high-level content on using tools to achieve security compliance, including very helpful resources on open source and free solutions.
Comments
Please log in to join the conversation