AlgoSec Horizon Private Offering only

I use AlgoSec for automation, audit and compliance, policy optimization, and rule recertification. For automation, we use AlgoSec for firewall changes to simplify, speed up, and make the process more efficient, particularly regarding standardization of the specific change types.

Policy optimization is a significant focus because of the policy bloat on firewalls, and we aim to quickly reduce the footfall of the policies to improve security and visibility.

The best features AlgoSec offers include a good web front end, user-friendly modules, and particularly the visual flow in FireFlow, which is a really powerful feature. The visual flow certainly helps me in my day-to-day tasks by making troubleshooting easier and adapting workflows simpler, as the visual representation and simplicity significantly aid in modifying workflows.

AlgoSec has positively impacted our organization by enhancing our ability to develop capabilities in this space, serving customers effectively, and improving their experience along with our security posture, visibility, and the capabilities of the product.

I believe AlgoSec can be improved through a continual dialogue between us, understanding where the roadmap is headed, and aligning our organization's challenges with it, ensuring responsiveness about certain features that require urgency.

I think we are in constant dialogue with AlgoSec and ensuring communication with the actual product managers, which is key. It is a work in progress, but it is heading in a positive direction.

I have been using AlgoSec for approximately two years, and in my previous role, which was about twelve to thirteen years ago, I used it for about two and a half years.

AlgoSec is currently stable.

AlgoSec's scalability is fine as long as it is designed appropriately for the environment; we also receive good support from the design teams at AlgoSec during pre-sales.

I currently have no issues with customer support.

I previously used Skybox before switching to AlgoSec, as Skybox went defunct, which was the main reason for our switch.

I anticipate seeing a return on investment in the next four months, with similar exercises previously showing an average of five hours saved per change, allowing us to calculate potential FTE savings on the metrics we expect from AlgoSec.

Regarding my experience with pricing, setup costs, and licensing, I do not get too involved, but it seemed acceptable, and they do try to ensure the best for the customer through discounts and various offers.

Before choosing AlgoSec, we evaluated Tufin and FireMon as other options.

My advice for others looking into using AlgoSec is to ensure that their roadmap and key use cases align with AlgoSec's roadmap and products; if there is alignment, I believe it is the way to go.

AlgoSec is currently deployed as both on-premises and in a public cloud setting, and this deployment is evolving. For our public cloud deployment, we use a combination of all providers to a degree: AWS, GCP, and Azure.

Since using AlgoSec, I have noticed measurable improvements in speed to delivery, and the ability for support teams to work more efficiently and effectively. Although we are still deploying, those immediate improvements include speed of response and execution.

Regarding AlgoSec's AI capabilities, I think its governance and security aspects are still quite new for us, and we are approaching them tentatively. While the capabilities are exciting, building trust within the organization will take some time. The accuracy and reliability of AlgoSec's AI output are still a work in progress. It involves features we have not fully embraced yet, and we need to fully onboard and integrate them to provide more suitable feedback.

Before using AlgoSec Horizon Platform, the application connectivity process was quite immature; when changes came in, they were treated individually with limited focus on applications and specific requirements. AlgoSec Horizon has greatly improved visibility into our application environment; although it is early days, the training suggests it could be a powerful ally and asset for us, and we need to align everyone to embrace that mindset.

Answering questions about application connectivity that were difficult before using AlgoSec is still a work in progress, but I am confident that once the application is mapped, changes will become much simpler and more efficient, allowing us to identify owners and current connections easily. AlgoSec Horizon has not yet improved collaboration between application owners and security teams due to challenges in aligning everyone to that way of thinking and sharing subscriptions; it is a non-technical challenge we are facing.

Application context is critical for managing our organization's network security policies; once everyone aligns with this mindset, it will be essential for looking at the overall ecosystem. AlgoSec has changed the way I understand and manage application connectivity across my environment by moving away from silos, with improved visibility facilitating a more collaborative approach.

I would rate this review eight out of ten.

AlgoSec is used for firewall change requests, utilizing FireFlow and the application wizard to onboard applications. FireFlow is used extensively throughout the organization. Using AlgoSec for firewall change requests and onboarding applications has significantly improved daily workflow. Previously, if a user had a connectivity requirement within the bank, they would raise it manually via email, requiring the operation team to record the information and deploy the policy on the firewall. After implementing AlgoSec FireFlow, users now have an interface to provide basic information and submit requests, allowing the operation team to handle deployments more efficiently with the help of ActiveChange. This process flow eases both users and firewall engineers while expediting the deployment process for the bank.

AlgoSec has significantly increased our deployment speed and reduced the time required for our engineers to process firewall changes. It streamlines our overall workflow, ensuring that connectivity requests are completed much faster and consistently within our defined SLAs.

AppViz was recently adopted and represents another level from FireFlow because it provides more insights to both the application perspective and the firewall team perspective. Currently, many rules lack ownership clarity, but since using AppViz, awareness has increased regarding firewall requests coming from specific applications and the reasons for each rule's existence. This enables application owners to see all their firewall rules in one place, which is especially useful when replacing staff in case an application owner moves departments or organizations.

AppViz is valuable due to its ease of use for application owners, enabling them to see existing policies. If they need to test new connectivity, they can do so without contacting the firewall team; they can test connectivity themselves and raise requests only if blocked. Previously, they would contact the firewall team for permission, consuming both their time and the operation team's time. With AppViz, the process is much easier.

The best features AlgoSec offers include AppViz, which is still in its early stage but provides better visibility and insight.

Application owners can now clearly see which rules exist across the infrastructure. Before implementing AlgoSec, they had zero visibility into existing connectivity policies, but now they can answer those questions directly.

AlgoSec has greatly improved visibility by providing application owners with a single interface to view existing firewall policies. They can now check and test connectivity on their own before reaching out to the security team or raising a new change request.

AlgoSec has improved collaboration substantially. Having all rules and requests in a single, centralized view reduces friction between teams because both the application owners and security engineers are looking at the exact same network policies.

Application context is extremely important to us. Having that context allows our security team—especially during security incidents or audits—to quickly pinpoint why a specific firewall rule exists and map it directly to the responsible application owner.

AlgoSec has made managing application connectivity significantly easier. Centralizing all relevant information onto a single platform gives our application teams direct, clear visibility and removes the guesswork from understanding our network environment.

AppViz needs to add more capabilities, specifically for object flow modification because it is still in the early stage for this feature, and any improvements in object modification would be beneficial. AppViz should include more features and flexibility in terms of objects. For complex deployments within the network infrastructure, considerable custom configurations are required. If AlgoSec anticipates these needs with more use cases, it would be advantageous.

Currently, reporting features are lacking, and more insight would be desired in reports.

AlgoSec has been used for more than eight years in the bank, and all products within AlgoSec are utilized.

AlgoSec is stable with multiple instances running smoothly without frequent downtimes, making it stable and reliable.

AlgoSec's scalability is impressive. Since everything is VM-based, if utilization increases, the hardware can simply be enhanced as needed. It works well in terms of scalability.

Customer support is generally better, though there are complex cases that understandably take time, especially if fixes need to be tested on their end. Bug fixes require time to complete.

No other technologies were used before switching to AlgoSec.

The process of calculating ROI is underway with the help of ART, but it is certain that the time savings in deployment is significant.

The reason for selecting a rating of eight is because AlgoSec is easier to use and has a lot of depth in certain aspects. The deployment is easier than with competing technologies, and the support is generally very good in resolving tickets, though there are cases that take longer due to the need for fixes. I would advise others considering using AlgoSec to note that it features multiple suites, covering various technologies, and it is easy to use. I would rate this product an 8 out of 10.

My main use case for AlgoSec is managing firewall rules, specifically on-premises firewall rules, where users input their requirements in AppViz and we implement the rule using the FireFlow change.

A specific example of how I use AlgoSec for firewall rules in my workflow involves application owners having access to their application in AppViz. They can only raise a FireFlow request from there. So they edit the AppViz application and then they submit their change. This change goes to a firewall flow request, which we implement end to end. We have automated tools using the API from AlgoSec in the planning phase and on the approval phase.

AlgoSec has drastically improved our implementation speed and visibility across our banking environment. We can now process and implement every single firewall request in under 24 hours. Before AlgoSec, we tracked all application connectivity across separate Word documents, making it nearly impossible to understand why rules existed or how applications interacted. Now, we have a clear, graphical view of our connectivity—showing where applications are connected, why, and who is using them. The visual reports are so clear that our software architects and application owners routinely use them for architectural reviews and documentation.

The best feature that AlgoSec offers, by far, is AppViz. This is the thing that AlgoSec offers, and it is unique in the market, and in my point of view, their strongest selling point.

What makes the AppViz feature stand out for me is its capability to provide a quick overview of our application landscape, which helps in my daily tasks because it is used not only by us but also by the architects to review the architecture and connections of all our applications.

AlgoSec has positively impacted my organization by significantly increasing the speed of implementation for firewall requests. We implement them in less than 24 hours on average, and simultaneously, we have gained a clear overview of our applications in banking, including their connections, the reasons for those connections, and the users involved.

AlgoSec displays our application connections in a clear, highly visual graphic format. The visibility boost has been significant—I frequently see colleagues copying AlgoSec's connectivity reports directly into our internal documentation, which shows just how much our team relies on it for accurate mapping.

AlgoSec fundamentally made understanding and managing application connectivity possible for us. Before we implemented it, it was nearly impossible to track down where specific firewall rules were located, why they were put there in the first place, or which applications were actually using them.

AlgoSec can be improved by putting AppViz more at the center. Specifically, I suggest customizing AppViz more, including features such as input validation that is not available in AppViz but is in FireFlow, or the ability to copy the AppViz object to the policy. Thus, AppViz should be at the center of their operations, not just as an endpoint in the implementation logic.

One area that AlgoSec could do better is in the pricing. For example, mobile providers have different plans, but their plans are not based on a per-license model, and they usually offer an unlimited option. Therefore, I would expect AlgoSec to have a maximum payment cap per client while allowing unrestricted use of its resources.

Application context is extremely important to us. Going forward, I'd love to see AlgoSec leverage AI to enhance this even further—specifically by scanning our application documentation to automatically draft identified connections and perform risk evaluations per connection before an application owner even submits a request.

I have been using AlgoSec for three and a half years.

AlgoSec is not stable.

The stability issues I have experienced with AlgoSec include slow object deletion, where finding usage could take hours, causing the system to freeze, particularly when handling queries related to many applications. We attempted to resolve these issues with AlgoSec support, and while some problems were fixed with a new patch, we still struggle with system sizing questions.

The customer support experience varies depending on the representative. I have raised many tickets over the last few years and have been extremely pleased with some support engineers while being less satisfied with others.

I would rate customer support a six on a scale from one to ten.

I did not previously use a different solution before AlgoSec.

Be cautious regarding the per-application licensing costs, which I find quite steep. AlgoSec should offer an unlimited tier or a price cap once an organization reaches 1,000 to 5,000 applications, similar to an unlimited mobile data plan. Additionally, watch out for transition costs: as on-premises customers, if we want to migrate to their SaaS platform, we are forced to pay extra for professional services—essentially paying twice for a service setup we've already paid for, even though the platform shift is driven by the vendor.

Before choosing AlgoSec, we evaluated other options, including FireMon and Tufin, and we conduct evaluations on cycles.

One area that AlgoSec could do better is in the pricing. For example, mobile providers have different plans, but their plans are not based on a per-license model, and they usually offer an unlimited option. Therefore, I would expect AlgoSec to have a maximum payment cap per client while allowing unrestricted use of its resources.

My advice for others looking into using AlgoSec is to avoid trying to combine other methods for making changes to firewalls simultaneously. Instead, they should use AppViz, trust it, and set it up while managing everything through that platform. I would rate this solution an eight overall.

My main use case for AlgoSec is for firewall management, auditing, and managing firewalls. A quick specific example of how I have used AlgoSec for firewall management and auditing is when we had multiple firewalls that we wanted to get a unified view, and there we used AlgoSec. That was the main reason for what we used.

The best feature AlgoSec offers is the ability to create a unified view for auditing. What I find most helpful about the unified view is that it saves time and simplifies audits because it reduces false positives and brings a smoother auditing process.

I would add that the reporting is also very advanced, and regarding automation, I was not very involved in that part, but I heard that it is also a very mature feature from AlgoSec.

AlgoSec has impacted my organization positively as it has brought noticeable improvements, including having multiple firewalls and vendors while getting a unified view, automated processes, and very good reporting.

AlgoSec could be improved by extending their products for security because they are very focused at the moment. They could have broader product lists, which would be a good idea.

Regarding needed improvements, we did not have any issues with integration as it was very smooth and not very complex. However, for usability, I suggest a better UI, as compared to Palo Alto, which I find is more friendly and attractive compared to AlgoSec.

I work in my current field for around one year.

AlgoSec is stable, which is why it was suggested, and I have no experience with other products.

AlgoSec's scalability is absolutely good.

I have not needed to reach out to customer support, as we did not contact them.

I have not seen a return on investment, and I cannot share any relevant metrics such as fewer employees needed or money saved.

I was not involved in the process of pricing, setup cost, and licensing. Our manager was dealing with the licenses while we focused on the technical side.

I did not previously use a different solution. I think for this matter, AlgoSec is the best product in the market that can unify all firewalls for auditing.

On a scale of one to ten, I would rate AlgoSec between eight and nine. I chose the number eight because I believe that the functionality is very good. While the functionality is very good, as I mentioned, the UI can be improved, and the products can be more varied. AlgoSec could explore more topics such as Zero Trust or other security standards.

AlgoSec's AI capabilities is something that I did not work with, to be honest. I have not used AlgoSec's AI capabilities regarding accuracy and reliability of output, so I cannot provide any insight there.

I do not have any improvements needed for AlgoSec that I have not already mentioned. It was just my personal experience. My advice to others looking into using AlgoSec is that if they want to have a unified view, it is a very good product. They can have a proof of concept, test it, and see the benefits. This is how I would suggest others go with AlgoSec. I would rate AlgoSec a score of eight out of ten.

My main use of AlgoSec in my organization is for firewall security policy management and automation.

A concrete example of how I use automation with this tool in my daily work is that the FireFlow module is a real time saver. What used to take us hours for impact analyses, rule change or implementation requests, and verification is now automated in a few minutes, all without introducing human error.

I would like to add that we have incredible end-to-end visibility, and in fact, the network mapping is surgically precise. AlgoSec allows us to visualize traffic flow across our entire on-premises, hybrid cloud, and multicloud infrastructure in a single, intuitive interface.

In my opinion, the best features that AlgoSec offers include continuous compliance, as AlgoSec checks our firewall rules in real time against regulations, such as ISO 27001, PCI DSS, or NIST, and against our internal policy. Audit reports are generated with one click, and our auditors absolutely love that.

Regarding continuous compliance and audit report generation, this has simplified our audits and the management of regulatory controls in our organization because we don't use several applications; we only use AlgoSec.

I would also like to add that there is multi-vendor compatibility that we manage. We can manage our Palo Alto, Check Point, or Fortinet devices at the same time, and as a result, AlgoSec integrates perfectly with our entire ecosystem without any friction.

In my opinion, AlgoSec could be improved in the future, as we had some small issues with it at the level of overload. There was a lot of overhead, and we increased the disk space. Afterward, I think it was more the development part on our internal side than the tool itself, but the tool was really good; it was complete, and I had nothing to add.

I have been using this solution for a year and a half.

In my opinion, AlgoSec is stable in my current environment.

I find AlgoSec's customer support generally positive based on user feedback in my experience so far.

I have never used another solution before for network security management before using AlgoSec.

I have seen a return on investment with AlgoSec in that our network and security teams spend sixty to seventy percent less time on manual tasks for managing flow openings and documenting rules.

Before choosing AlgoSec, I did not evaluate other solutions because when I arrived at the company, they already had it.

AlgoSec has had a positive impact on my organization in that we no longer have to connect directly to the firewalls one by one. We can directly have AlgoSec manage the entire firewall group, so it is perfect.

I can explain in more detail that this frictionless integration has improved productivity and collaboration within my team. I would say that there is perfect alignment between security and the business. With the application-oriented view AppChange, we no longer speak only in IP addresses and ports, but in business applications, which has significantly improved collaboration between our security infrastructure teams and the developers.

My advice to other professionals who are considering using AlgoSec is to clean up your rule bases beforehand. AlgoSec is excellent for cleaning up your firewalls. You can deploy solutions step-by-step, and there is visibility provided by AlgoSec. Then, there is automation, and there are business applications rather than IP addresses. I rate this solution a ten out of ten.