Alert Logic MDR Reviews

“Simple to deploy!

Pros

Simple deployment process made getting started so easy. The dashboard provides clear information. Installing agents was not an issue.

Cons

The reporting features could be better. Instead of getting a PDF report via email, they send you a link that still makes you log in again. Also, trying to make sense of the vulnerability list is pretty confusing.

“Smooth set up

Pros

Setting it up went smoothly. The threat detection accuracy really impressed me. It integrates with our current tools and the official workshops plus expert support team are top-notch. The vulnerability reports give us excellent visibility into our nodes which has been invaluable.

Cons

Expensive for smaller businesses and any customization has to be done through the back-end system. There's also a steep learning curve and it takes forever to get comfortable with everything.

“Part of our routine!!

Pros

It's easy to use and their team made getting started simple. Since we're a big company with just a few security folks, having that round-the-clock monitoring has been a lifesaver. I appreciate how it flags the serious threats right away. The dashboard makes sense and doesn't overwhelm you with clutter. When something comes up, reaching their specialists is simple and they get back to us quickly. We're checking in on it every day and it's become part of our routine.

Cons

The integration was pretty slow since our IT setup is complicated. For tools that run 24/7 in the background, I'd recommend doing vulnerability scans during off-peak hours so they dont bog down the main production systems.

“Detailed SOC features

Pros

I appreciate the comprehensive SOC features that give me complete visibility and detailed logging across our systems. The vulnerability management and compliance tools have been excellent for keeping everything secure and meeting requirements. Setting it up was not hard especially with the support team's help.

Cons

Costs more than other options out there. The customer automation features could definitely use some work.

“Keeps us compliant

Pros

I'm impressed by how well this security system protects our data and keeps us compliant with all the major regulations we need to follow.

Cons

Getting the hang of it was pretty tough when I first started, definitely not beginner-friendly.

“Effective real-time monitoring

Pros

The IDS has been rock solid for our network security needs. Real-time monitoring keeps us on top of everything and the alerting system catches issues before they become problems. Log ingestion and analysis features work smoothly for tracking incidents.

Cons

Setting it up takes quite a bit of effort and the costs can really add up over time.

“Never lets us down !

Pros

Really helped us achieve compliance and win over more customers. We rely heavily on MDR for log analysis and it hasn't let us down.

Cons

Would love to see AI-powered automation and heuristic analysis for updating security controls.

“Great dashboard reports

Pros

It handles vulnerability assessments smoothly and makes generating dashboard reports easy. The compliance documentation feature has been a huge time-saver for our team.

Cons

Setting it up was pretty tough when I first started and the learning curve is definitely steep for newcomers.

“Good value for money

Pros

The deployment process is not complicated at all and it's great how comprehensive the security detection capabilities are. It catches everything from vulnerabilities and exposures to unusual events in logs, plus intrusions and lateral movements through the HIDS functionality. What really stands out is the extensive querying language, you dont need to rely on parsers when building custom searches or creating rules. Getting this up and running operationally was simple and I could see the value of my investment almost immediately.

Cons

The licensing tiers are frustrating and you can't really customize the dashboards or reports the way you'd want to.

“Support team is always available

Pros

Compliance coverage and visibility across deployments has been outstanding. Support team is helpful and engineers are always available when we need them.

Cons

Its a bit difficult to understand if you're new to this kind of technology. Took me a while to figure out all the features and how everything works together.

“Amazing IDS functionality

Pros

The IDS functionality is top-notch and easy to get running. All you really need is an agent and you're good to go.

Cons

It is complicated at start and the price point can be tough for smaller companies just getting started.

“Ensures compliance!

Pros

Security features are so powerful and it handles compliance with all the major industry standards.

Cons

Getting started was pretty challenging when I first began using it.

“Difficult to learn

Pros

Reporting features are solid and I appreciate how user-friendly the console is. Support has been there whenever I've needed assistance and the compliance tools make regulatory requirements much easier to handle.

Cons

It's hard to get the hang of. Takes some time to get used to.

“Impressive threat detection across all environments

Pros

The threat detection capabilities across my AWS, Azure and on-premises environments are really impressive. Integration between platforms works well which lets me centralize security management for all my client projects without any issue. What really sets this apart is having access to their SOC team and cybersecurity experts. They're genuinely proactive and feel like an extension of my own team. I don't have to worry about staying on top of every threat myself. Their threat intelligence is solid too and they do a great job helping tune detection systems to cut down on false positives.

Cons

The main downside is getting everything set up initially. There's definitely a learning curve especially if your team hasn't worked with MDR across different cloud environments before. It's not impossible but you'll want someone with experience to handle the initial configuration. The advanced threat-hunting capabilities are fantastic but they cost extra which makes sense for bigger operations but might be too much for smaller teams.

“Gives deep insights

Pros

Dashboard is friendly and the platform gives us a solid bird's-eye view of security incidents. What I appreciate most is being able to dive deeper into specifics like packet captures, SQL analysis for threat validation, the whole nine yards. For our small team, the customizable alerts are a game-changer since we can fine-tune SOC calls to focus on what actually matters to us.

Cons

Getting up to speed was tough since the training is only available online which made it hard to get quick answers when I had questions.

“powerful security protection

Pros

The security protection it provides is really solid. Setting it up was pretty easy and when I ran some internal threat simulations, everything got caught as expected. The interface is clean and doesn't require much effort to get used to.

Cons

For our small office with under 15 people on the tech side, the cost is a bit high.

“Love the proactive calls on critical threats

Pros

Appreciate the new incident response page showing which MITRE framework elements are being addressed. When something gets escalated to High or Critical severity, the team actually calls and emails me which is great for urgent situations. The Investigate Health feature has been quite handy for monitoring overall system status.

Cons

The internal scanning process is painfully slow and doesn't finish quickly enough. When you're dealing with a large deployment, you really need to set up multiple VM IDS to handle the workload properly.

“Awesome AI thread analysis

Pros

I'm really impressed with how the AI analyzes threads and generates responses. The accuracy is spot-on with hardly any false positives showing up.

Cons

Nothing really bothers me about it. I guess the pricing could be a bit more competitive but that's about it.

“Gives me visibility into network security

Pros

It gives me complete visibility into our entire network security and I can see everything that's happening across our company operations on a daily basis.

Cons

The only downside is there are occasional bugs but they're pretty minor. Otherwise everything runs smoothly.

“Well laid-out interface!

Pros

The interface is well laid-out, probably the best I've come across recently. Everything is presented clearly and gets straight to the point which makes my daily workflow much smoother. Setting it up with our existing data sources was quick and the guidelines for any additional configuration were really helpful. I'm genuinely excited about what's coming next in their roadmap. plus the team behind it is amazing to work with.

Cons

Customization options feel a bit limited in some areas.

“Provides useful information

Pros

Incident reports and logs give me really detailed info that helps me figure out when I need to dig deeper into issues.

Cons

The suggested recommendations aren't always spot-on though they're usually more helpful than not.

“Fits our needs

Pros

I've been working with this security solution for several years and it delivers exactly what we need. The log agents do a solid job collecting and analyzing our data plus we get immediate alerts whenever something critical happens. The reporting features and compliance monitoring are really nice extras that add value.

Cons

Setting it up initially was pretty challenging for me. There's so many features that it can feel overwhelming really quick. Though with support and the onboarding team helping out, you can get through the process much easier.

“Makes you wait for scan results

Pros

I can schedule nearly everything and basically automate the scanning and reporting processes. Support responds pretty quickly when I need help with anything.

Cons

The cloud-based nature means waiting forever for scan results and discovery. There's basically no way to instantly scan new devices. You have to wait for the system to find the asset, scan it and then update reports. This whole process drags on for 2-4 days which is frustrating when you need quick results.

“Keeps us SOC 2 Type II compliant

Pros

Keeps us on track with our SOC 2 Type II compliance requirements.

Cons

The system generates tons of notifications which can get overwhelming even though it means everything's being monitored properly.

“A game-changer for 24/7 security & expertise

Pros

It has been a total game-changer for our security posture. The around-the-clock monitoring and instant threat detection really put my mind at ease. I know our environment stays protected even when I'm not watching. Setting it up was smooth and it integrated perfectly with what we already had running. What really impressed me was how quickly their SOC team responds to incidents and the thorough guidance they provide for fixing issues. Getting access to enterprise-level security expertise without the massive overhead of building our own team has been cost-effective. The compliance support alone has saved us countless hours meeting regulatory requirements. It's proven to be a reliable, scalable solution that I'd definitely reccomend to other organizations.

Cons

Sometimes it throws way too many alerts at us including false positives that just clutter everything up. Customizing alerts and reports to match our specific workflow isn't as flexible as I'd hoped. Integration with some of our more unique tools has been pretty challenging. Response times for non-critical stuff can drag on longer than we'd like. The pricing can get steep and honestly the interface feels dated, could really use a makeover to make it more user-friendly.

“Clean and clear reports

Pros

In my experience it's been user-friendly. Connects AWS accounts without any issues. The reports come out clean and make sense right away. Getting new sensors and agents up and running is pretty easy too.

Cons

The agents can be problematic sometimes. Adding external vulnerability targets through the UI is a real pain. There's no CSV upload option so I ended up having to use the API and build my own custom process just to get it done. The Integrity Detection Platform is basically useless. Sure it'll tell you when a file or property gets changed but it won't show you what the previous value was which defeats the whole purpose.

“Crucial for compliance

Pros

I can easily meet all our compliance requirements for log storage and access with this tool. It's been essential for helping our IT team achieve certifications like SOC2 and HITRUST.

Cons

The menu shows "topology" twice which can be pretty confusing.

“Helps me focus on important matters

Pros

I depend on this solution to sift through our logs and alert us about critical events that could impact our organization. It helps me focus on what truly matters while filtering out all the background noise from less important activities.

Cons

I wish I could view and modify alert patterns on my own instead of having to reach out to support every time.

“Amazing feature and support

Pros

Gives our small IT team access to enterprise-level features that would normally be out of reach. Customer support is really responsive and installation was simple.

Cons

Dashboard layout is complex and creating reports feels way more complicated than it should be.

“Incredible security compliance

Pros

The security compliance and alerting features are outstanding. They really give me peace of mind when managing sensitive data.

Cons

Setting this up is really complicated and you'll need several sessions just to get it working with your existing infrastructure.

“Not always accurate

Pros

Managing our security without the headache of running a 24/7 SOC ourselves has been a game changer. The automated reporting system delivers everything on schedule which is crucial since we might otherwise miss critical findings that disappear from the console in our ephemeral setup.

Cons

The accuracy isn't always there and I find it difficult to trace where the information comes from when it generates findings. Since our environment has ephemeral assets, the findings keep appearing and disappearing which makes reporting trends or establishing baselines really challenging. The Health Exposures reporting is also confusing. We expect everything to be fine by default so it should highlight what's actually wrong instead. We've heard that sometimes unhealthy remediations get mixed in with the healthy ones.

“Impressive threat detection capabilities

Pros

Threat detection capabilities are really impressive and catch things I might have missed otherwise. I find the interface user-friendly even when I'm in a hurry. What I appreciate most is how well it works with our current systems with no major disruptions or compatibility headaches.

Cons

Setting it up exactly how we want can be tricky and there's definitely a learning curve when you first start using it.

“Comprehensive solution

Pros

I really appreciate how this solution handles security coverage. It handles everything whether I'm working with on-premises systems, cloud environments or a hybrid setup which is valuable when dealing with scattered infrastructure.

Cons

The pricing can definitely sting especially for smaller companies or anyone working with limited budgets. Sure, you get comprehensive coverage and expert support but it feels pretty high when you're watching every dollar. Its something you really need to factor in if cost is a major consideration for your organization.

“Our team loves it!

Pros

Our web security team absolutely loves this tool and they've been relying on it for years now.

Cons

Setting it up for internal network scanning was harder than expected. My team struggled with the configuration process for this specific use case.

“Customer Support stands out

Pros

Support really makes or breaks any third-party service for me and these folks have been helpful with setup, configuration and resolving issues in our AWS deployments. The team is always ready to assist and makes integration easy when we're configuring new environments.

Cons

The incident and exposure workflow could definitely use some organizing. I get that there's tons of data flowing through to keep everything secure but opening those tabs and seeing hundreds of notifications, many being duplicates of the same issue gets pretty overwhelming fast. It would be great if there was better organization or filtering to make it less chaotic.

“Highly customizable

Pros

I like how deep the console goes. It lets me customize things down to the smallest detail. What's even better is that this level of tuning isn't just limited to what I can do myself through the interface. The dedicated SOC team has been helpful, always ready to jump in with advice or make adjustments for me when needed.

Cons

Getting everything configured properly requires quite a bit of upfront work and patience. If you're expecting something that works perfectly right out of the box without any setup, this probably isn't the right fit. However, once you've invested the time to get it all dialed in, the payoff makes it worthwhile.

“provides useful information

Pros

Gives me lots of information about CVEs and how to fix the alerts that come up

Cons

Would be helpful if vulnerabilities could be grouped by their solution like when one patch fixes multiple alerts, having them grouped together would make it much easier to prioritize what needs to be done first in our action plans.

“Bad user experience

Pros

Daily log reviews are handled automatically which really helps with our PCI compliance requirements. When I've had questions about file integrity monitoring, the support team has been professional and willing to answer them.

Cons

The interface took me a while to figure out and ever since they forced the move to Forta for scans, we've been dealing with one issue after another. The portal feels unstable and glitchy. I've never been able to get the login process to work properly in Firefox. It really seems like they didn't test this thoroughly or just don't care about user experience.

“Declining support

Pros

Setting up and deploying this was convenient especially when it came to configuring the agents and appliances.

Cons

Haven't heard from their team in quite a while now. Communication has really dropped off.

“No complaints from my end

Pros

Getting instant notifications in my inbox whenever something goes wrong has been a lifesaver. With just two people monitoring everything, this tool basically gives us a hundred extra pairs of eyes watching our systems.

Cons

I haven't found anything to complain about with this system yet

“Complicated to handle

Pros

The vulnerability assessment features are really comprehensive and I appreciate how quickly the management team gets back to me when I reach out.

Cons

can be tricky to manage and the interface isn't always the simplest.

“Brilliant team!

Pros

Customer support team is really helpful when I need assistance. I get live alerts around the clock for any critical events. Integration was flawless and didn't require much technical expertise on my part.

Cons

Getting up to speed with this platform requires patience and it takes time to get used to.

“Great value

Pros

Gives our small security team incredible 24/7/365 coverage that we couldn't manage on our own. The value is huge for monitoring and alerting.

Cons

The only downside we experienced was having to log into yet another portal just to access security alerts.

“Solid package

Pros

The software package offers solid quality and was easy to get up and running. Quite user-friendly too.

Cons

It's a bit pricey and the costs keep going up which is frustrating

“Automatically ranks security threats

Pros

Appreciate how it automatically spots and ranks potential security threats through its EDR capabilities. The extended detection and response features really stand out.

Cons

The reporting features could be more powerful and offer deeper insights.

“Gives me peace of mind!

Pros

I can offload important tasks to the cloud without worrying about compromising our data security.

Cons

I struggled to figure out some of the key features and found myself confused more often than I'd like.

“Provides detailed breakdowns

Pros

It catches threats across all my systems. Having everything managed from one central dashboard makes protecting endpoints and applications so much simpler. When attacks do happen, the detailed breakdown of exactly what went down is so helpful for understanding and preventing future incidents.

Cons

Hard to find any drawbacks. Maybe could be simpler for beginners.

“Valuable insights

Pros

Finding troublemakers on our network is easy and happens fast. The insights we've gotten into our AWS setup have been valuable, stuff we never saw before. I also appreciate being able to monitor site status and run detailed analysis when needed.

Cons

I've been using this for a while and it does the job but honestly I'm not confident about its long-term reliability or what might happen down the road.

“Detailed solution

Pros

I get much better visibility into network activity than I ever had before. It's really comprehensive and shows me everything that's happening across our systems.

Cons

There's some confusion around deploying agents without letting workstations function as remote collectors.