My main use case for MetricStream was that I was a developer and I prepared templates for a client while also testing the UI platform for the client.

I can give a specific example of a template I prepared for a client. We had a task about what the client wanted, about the solution, about governance, about the tech template, and about SOX compliance. After we had some points, I created forms. It was basically something similar to Microsoft Forms. I prepared templates within MetricStream and took these blocks to create components together, something resembling Lego parts.

When I was a developer, this was a quite narrow template, and it consisted mostly of pieces from a constructor. I created one large form for the client. However, the main issue is that if a client needs something larger or more custom, there are no tools to change these blocks. Instead, I need to create a task for the developer team. Additionally, my customer team from MetricStream is located in India. A significant issue is with technical support because for the first month, they do not have any time and they do not want to change anything. Basically, I only have access to the UI and do not have access to the code base. However, for developers preparing solutions for clients who need to make a change in the code base, it would be much easier to change our own code rather than wait two or three months.

The best features MetricStream offers are the nice dashboards. However, I believe that the same system could be built much cheaper. With the help of one Python developer and one data engineer, it could be created more easily. To me, it appears to be mostly a marketing-driven product, functioning basically as a better package for something similar to Microsoft Forms.

Regarding features, I think it was nice when I knew what was needed, and when a client had seen the issue beforehand. MetricStream is something like an all-in-one solution where I do not need to write scripts or conduct audits. However, it may be a cheaper option when an audit is not necessary, such as a Microsoft audit or governance audit. It might be cheaper for two or three months, but when deeper research on a company is needed, it is not suitable. Essentially, it is an audit platform with a nice dashboard.

MetricStream has positively impacted my organization because we sell it in Europe. However, I implemented it at a couple of companies and I do not see any positive impact. For the client, they can see a nice platform with a friendly UI and a dashboard. For a developer, there is basically no added value because all these things can be obtained from scripts. Scripts can be written easily and are a really cheap alternative. I do not see any reason to buy MetricStream for a couple of thousand euros per month when scripts can be written with internal audit, cyber risk audit, or policy searching capabilities. Essentially, it is a business version of Grafana.

A specific example of how a client benefited from using MetricStream is that it is better for usability. If a client needs to check risk inside a cloud environment or internal environment, they have a nice dashboard with compliance status, open issues, and key risk information. If the management part is implemented, there is also a nice dashboard with compliance status ranging from zero to 100, control test requests and results, and a nice dashboard from the forms.

MetricStream can be improved in the area of developers. There are two parts of developers: those who prepare solutions for clients and those from India who support the application. The support part is terrible, rating about one out of ten. The support quality needs significant improvement.

I have been using MetricStream for one to one and a half years.

MetricStream is stable, but if there is an issue, it will be complicated to resolve with the support team.

The scalability of MetricStream is basically easy. I can create many forms, but there is a cost associated with it.

The customer support of MetricStream is terrible.

Before MetricStream, we used Databricks and scripts for audit checks and our cybersecurity implementation. However, the business decided to switch to MetricStream and started selling MetricStream to other clients. I do not think it was a good solution because after a couple of months or years, we came back to manual checks.

I did not purchase MetricStream through the AWS Marketplace.

My company had a business relationship with the vendor other than being a customer because I was a reseller at my old company. Currently, I do not use MetricStream in my current job.

I have not seen a return on investment.

The advice I would give to others looking into using MetricStream is to not use MetricStream. I would rate this recommendation a four out of ten.