Sophos Cloud Optix (CSPM) - PAYG with Free Trial

I use Sophos Cloud Optix  most of the time to harden our AWS  infrastructure or Azure  infrastructure, and sometimes I use it to meet different types of compliance requirements such as SOC 2 and ISO 27001.

I was working in a regulated company where the State Bank of the country is the regulator, so to provide them a compliance report, our infrastructure is optimized and there are no security gaps. I harden our cloud infrastructure and then provide the Sophos Cloud Optix  report, which illustrates the current status of our security posture, helping me provide a detailed report.

I use Sophos Cloud Optix sometimes to find cost optimization gaps inside the cloud, such as unused resources, and the Sophos Cloud Optix dashboard explains very well about unused resources that must be deleted or taken care of, which helps us with cost optimization, including security groups that are created but not used.

I really appreciate most aspects of Sophos Cloud Optix, especially that we can set it up on AWS  marketplace without needing to host a new machine. We can use their trial version where we can monitor a small number of resources without any additional cost.

Setting up Sophos Cloud Optix on AWS is not difficult at all, also because my team has experience with it, making it very easy and quick to set up a trial version that helps us see the initial posture of our security setup as we grow, and then they charge based on the cloud resources.

Sophos Cloud Optix impacts us positively in many ways, particularly in security, which is an important part. It is not just about fixing everything without a clear picture of what we have done to improve security, as there must be a portal explaining our progress, which I really appreciate, and it helps us save time and in optimization for performance and cost.

While I have not seen much for cost optimization as we have another great tool for it, Sophos Cloud Optix aids us to set up our infrastructure appropriately, making sure databases are in a private network, and if systems are wrongly set up, it helps us quickly mitigate those issues and provides a report indicating the problem.

I am really impressed with the way Sophos Cloud Optix provides its features, so I am not sure about any specific improvements needed.

I am really satisfied about the reports Sophos Cloud Optix generates, provided in a PDF format which is very useful for our recording purposes.

I believe there can be improvements in the logging mechanism, with more detailed information available about systems or network logs being beneficial.

I started using Sophos Cloud Optix for the first time three or four years back when I was working in a small fintech company.

I believe Sophos Cloud Optix is very scalable, as it automatically detects new resources in the cloud environment as it grows.

I have not connected with Sophos Cloud Optix customer support yet, but I had a bad experience when our AWS cloud got compromised, leading to many resources being provisioned, and while Sophos Cloud Optix identified those resources, the resulting bill from AWS was quite high due to the usage charges, which I tried to investigate with the Sophos team, though I am not sure if they assisted with the refund.

The initial setup process for Sophos Cloud Optix is really easy, just a few clicks, and you should be good to go.

I have not integrated Sophos Cloud Optix with other tools, but I believe there are many integration options available.

The learning curve for new users on my team with Sophos Cloud Optix is not much complicated, though new team members definitely need some training on how to add things together, collect reports, and gather information from the dashboard.

I definitely recommend using Sophos Cloud Optix, even for small customers, as it helps to view the security posture of your infrastructure. I would rate this product 9 out of 10.

Public Cloud

Amazon Web Services (AWS)

Positive

What do you like best about the product?

The insight is great. Products are really impressive.

What do you dislike about the product?

Nothing to dislike. All good. I find the product much better

What problems is the product solving and how is that benefiting you?

It's deduction technology is quite impressive and accurate which detects the thread and send a note send notification to inform about the details so that an automation based investigation can be performed to dissol the concern.

What do you like best about the product?

Sophos Cloud Optix is exceptional when it comes to infrastructure visibility, cloud resources inventory management and identifying potential security & compliance risks.

Its platform support for auto-discovery across multiple cloud environments is great & we obtain well-rounded insights from its intuitive dashboard.

Its cloud gap analytics aids us to pinpoint operational inefficiencies & ensures that we are properly aligned with client specifications & compliance standards.

After our EC2 instance deployments, we need to continuously monitor for misconfigurations and vulnerabilities in its security posture. Sophos Cloud Optix provides comprehensive visibility which helps us validate our configurations effectively.

What do you dislike about the product?

We utilize Sophos Cloud Optix platform for many of our AWS services management namely EC2, S3, RDS , IAM and CloudFormation.

For preventing unauthorized access and to enforce limited resource privileges, we manage our IAM users, roles and policies through the visibility offered in its dashboard.

Implementing an unified policy management utility is made simple thanks to its seamless integration with our AWS resources.

Overall, we are satisfied with the implementation & the governance features offered by Sophos Cloud Optix for our infrastructure management & cost optimization procurements.

What problems is the product solving and how is that benefiting you?

Recently, we did the analysis of our AWS CloudFormation templates with the help of Sophos Cloud Optix for config errors validation before deployment.

It actively tracks the changes made to any AWS resource in our infrastructure & offers real-time visibility into its security posture information.

Whenever there is any security issues/compliance violations in our CloudFormation stack deployment, Sophos Cloud Optix provides efficient auto-remidiation actions for enforcing compliance standards with our customer security policies.

We can also easily identify idle/unused resources that were deployed from CloudFormation stack. By deleting those stacks, we improve our resource allocation efficiency and minimize cloud expenditures.

With the insights provided by Sophos Cloud Optix, we can comprehend the relationships between the resources deployed via CloudFormation template thereby, prevent infrastructure changes that may potentially impact our production due to misconfiguration in their resource dependencies.

What do you like best about the product?

How the product identifies security gaps and vulnerabilities within cloud environments. Moreover, Sophos Cloud Optix empowers organizations to proactively address potential weaknesses and strengthen their overall security posture.

What do you dislike about the product?

Experiencing false positives and false negatives in the alerting and detecting of the threats. This may cause false alarms to users and question the product's credibility in the future.

What problems is the product solving and how is that benefiting you?

One of the problems Sophos Cloud Optix helps me solve is to conduct ongoing risk assessments; the platform identifies security gaps and vulnerabilities within cloud environments.