レビュー募集中！Sysdig Secureを紹介・競合製品の評判をユーザーレビュー・口コミで紹介

What do you dislike about the product?

Network monitoring is the weakest spot, it does provide some basic connectivity flow but not more than that.
The admission controller is very limited.
Some visibility options are only available when you have a CSPM license.

What do you like best about the product?

Sysdig is exceptional in runtime protection areas. From simple container and process monitoring until the point of the actual hardening. Image profiling is very useful at a point when you want to harden a workload. It's very simple to use and can even replace manual seccomp policy creation.
The vulnerability engine is pure gold and the new risk spotlight feature is incredible and allows us to focus on the real and imminent risks. It also integrates with Snyk which makes our developer's life much easier and the remediation process much more efficient.
The Falco rule engine has tons of built-in rules which can be easily extended.

What do you dislike about the product?

* depending on the component there is a steep learning curve involved
* since the capabilities offered are so comprehensive - navigating the UI and implementing certain things sometimes becomes challenging

What do you like best about the product?

* the functionality offered is very comprehensive
* every component offered is solid functionality to increase compliance
* we can choose to implement different components, according to the current maturity / needs of our platform

What do you dislike about the product?

As with most rule/alert based security tools the tooling can generate a lot of noise if someone isn't tuning the rules engine. The UI does provide an easy way to add entries to the runtime tuning engine, as well as add custom rules/exceptions to filter down the noise.

What do you like best about the product?

Sysdig's new runtime vulnerability scanner is super cool! It not only shows the typical vulnerability information, categorizing CVEs into Critical,High, etc, but it also shows you which one of those vulnerabilities is loaded into memory at runtime and exploitable! This helps us prioritize which containers to patch!

What do you dislike about the product?

There is really not much to dislike about Sysdig. It has a strong technical capability, it is well supported, and actively maintained, new features and product improvements occur frequently.

What do you like best about the product?

- The product is built on open-source software (Sysdig Falco);
- It has strong technical capability, allows for flexible policy configuration and benefits from a seasoned threat research team who are well informed of the unique threats affecting containerised workloads;
- It is backed by a knowledgeable technical support team who understand their product and Kubernetes security. Their guidance has been exceptional, both from a strategic and operational perspective. We received hands-on support during key incidents (eg. log4j) which proved invaluable.

What do you dislike about the product?

- Although the fast speed at which new product features are released is appealing, managing the replacement of old features with newer equivalents can be overwhelming and can make planning a Sysdig implementation more difficult.

What do you like best about the product?

- Deep visibility with regard to vulnerabilities and runtime behaviours across hosts, containers, K8s and cloud environments.
- Extremely configurable product meaning that custom detection rules can be created and false positives can be eliminated.
- Superb pre and post sales support. Terrific ongoing service from dedicated technical account manager to ensure that we can realise the benefits of the full product suite.

What do you dislike about the product?

I wish Sysdig's cloud-native solutions would work better in conjunction with AWS. The Cloudtrail connector does not deliver as much value as the image scanning tools. I wish Sysdig's cloud connector could gather more information about vulnerabilities in a given account and gives us pathways towards a more safe cloud environment natively without having to deploy additional resources.

What do you like best about the product?

Sysdig provides a powerful engine to scan images on the fly, generating alerts and valuable insights in which assets may be vulnerable. Also, it gives you the correct version to patch, making it easy to correct such issues. It is easy to deploy and operate and the customer service is top-notch.

Recommendations to others considering the product:

If you are looking for a CSPM that will help you in making your environment safer, Sysdig's for you.

What do you dislike about the product?

We work by fixing the vulnerabilities of the images, so sometimes the vulnerable library is a dependency of a dependency and it is not always so easy to identify how to fix it.

What do you like best about the product?

With the ease of integration with pipelines and functioning in clusters, we can fix vulnerabilities in images before its deploy and after deployment. Support is fully available when we need it

What do you dislike about the product?

I've been advised it's in the roadmap but the ability to ignore or whitelist vulnerabilities

What do you like best about the product?

The runtime scanning of workloads combined with threat intelligence/insights makes prioritisation easier

Recommendations to others considering the product:

Great for customers who are cloud native and run Kubernetes workloads

What do you dislike about the product?

As with all alerting systems it can be difficult to get signal from the noise. The continued feature additions, especially rule exceptions and the automated tuner have greatly reduced the cycle time required to bring down the noise. I appreciate the focus by the Sysdig team in this area. Like all tools, it's an ongoing process to keep alerting trimmed to what's important.

What do you like best about the product?

We started our journey with Sysdig because of the flexibility of the underlying Falco rules engine. What has kept us with Sysdig is that flexibility along with continued feature additions that continually add greater value. We started with Container Security and now have CSPM, deep vulnerability information and the beginnings of infrastructure-as-code policy enforcement and drift control. In addition, their customer service is stellar. They keep us up-to-date as a customer with their roadmap and take our feedback seriously leading to great product rollouts.

Recommendations to others considering the product:

Advice for those looking at Sysdig Secure is to consider how well you understand the rules and policies you're implementing and how easy those will be to manage in the future. That is an inherent part of Sysdig Secure and what makes the platform usable and customizable. Other platforms we researched made this much less straightforward and customization was lacking. Definitely take a look at the Falco opensource engine and even take it for a test drive to see if you like the way it works. Sysdig Secure is a step up from Falco in features and functionality but the roots are the same which is what makes it great.