レビュー募集中！Sysdig Secureを紹介・競合製品の評判をユーザーレビュー・口コミで紹介

What do you dislike about the product?

Network monitoring is the weakest spot, it does provide some basic connectivity flow but not more than that.
The admission controller is very limited.
Some visibility options are only available when you have a CSPM license.

What do you like best about the product?

Sysdig is exceptional in runtime protection areas. From simple container and process monitoring until the point of the actual hardening. Image profiling is very useful at a point when you want to harden a workload. It's very simple to use and can even replace manual seccomp policy creation.
The vulnerability engine is pure gold and the new risk spotlight feature is incredible and allows us to focus on the real and imminent risks. It also integrates with Snyk which makes our developer's life much easier and the remediation process much more efficient.
The Falco rule engine has tons of built-in rules which can be easily extended.

What do you dislike about the product?

* depending on the component there is a steep learning curve involved
* since the capabilities offered are so comprehensive - navigating the UI and implementing certain things sometimes becomes challenging

What do you like best about the product?

* the functionality offered is very comprehensive
* every component offered is solid functionality to increase compliance
* we can choose to implement different components, according to the current maturity / needs of our platform

What do you dislike about the product?

As with most rule/alert based security tools the tooling can generate a lot of noise if someone isn't tuning the rules engine. The UI does provide an easy way to add entries to the runtime tuning engine, as well as add custom rules/exceptions to filter down the noise.

What do you like best about the product?

Sysdig's new runtime vulnerability scanner is super cool! It not only shows the typical vulnerability information, categorizing CVEs into Critical,High, etc, but it also shows you which one of those vulnerabilities is loaded into memory at runtime and exploitable! This helps us prioritize which containers to patch!

What do you dislike about the product?

There is really not much to dislike about Sysdig. It has a strong technical capability, it is well supported, and actively maintained, new features and product improvements occur frequently.

What do you like best about the product?

- The product is built on open-source software (Sysdig Falco);
- It has strong technical capability, allows for flexible policy configuration and benefits from a seasoned threat research team who are well informed of the unique threats affecting containerised workloads;
- It is backed by a knowledgeable technical support team who understand their product and Kubernetes security. Their guidance has been exceptional, both from a strategic and operational perspective. We received hands-on support during key incidents (eg. log4j) which proved invaluable.