We use the tool for managed detection and response.
Arctic Wolf Managed Detection and Response (MDR)
Arctic WolfExternal reviews
284 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Great solution for endpoints that provide absolute security
What do you like best about the product?
Visbility and easy to understand, investigate issues
What do you dislike about the product?
Actually, the price of the licenses because this solution don't give you a lot of discounts when you exchange of solution.
What problems is the product solving and how is that benefiting you?
When successfully deploying a project, Cylance proves to be useful. In our company, we configure it to analyze everything, which does generate a significant number of alerts. However, with a skilled team, it becomes a valuable tool. The observability it provides is excellent, offering insights into what is happening in our environment. Prior to adopting Cylance, we experienced numerous false alerts, leading to a constant feeling of being unprotected. Since transitioning to Cylance, we can rest assured and sleep better at night.
An easy-to-implement solution for managed detection and response
What is our primary use case?
What is most valuable?
The tool's most valuable feature is its ease of implementation.
What needs improvement?
Arctic Wolf Managed Detection and Response's analysis and remediation parts could be improved. It's not bad, but it needs improvement.
For how long have I used the solution?
I have been working with the product for eight months.
What do I think about the stability of the solution?
I rate Arctic Wolf Managed Detection and Response's stability a nine out of ten.
What do I think about the scalability of the solution?
I rate the tool's scalability a ten out of ten. My company has around 450 users who use it 24/7.
Which solution did I use previously and why did I switch?
We were using a product from a local Danish vendor. We switched to Arctic Wolf Managed Detection and Response for cost and capabilities. It offered more features and better support, including superior threat intelligence feeds.
How was the initial setup?
I rate the tool's deployment an eight out of ten, which took nine weeks to complete with two resources. Operational maintenance is relatively minimal and very easy to manage. However, functional maintenance requires a skilled resource like me. The extent of personnel needed depends on the size of the organization. As the organization is not very large, I can handle it independently in my current role. However, I anticipate needing at least five or six people for maintenance tasks in a larger company, such as my previous role. The resource requirement aligns with the company's size.
What about the implementation team?
We did Arctic Wolf Managed Detection and Response's deployment in-house.
What's my experience with pricing, setup cost, and licensing?
I rate the tool's pricing a nine out of ten.
What other advice do I have?
Before choosing a security solution, it's crucial to conduct thorough due diligence. Consider factors such as the vendor's approach, strategy, and compliance with data protection regulations like GDPR. Assess the vendor's data centers, their capabilities for shifting data around in case of issues, and their approach to DLP (Data Loss Prevention) detection. Evaluate whether the services offered align with your company's strategy and needs.
Review the different agreements provided by the vendor, including Managed Detection and Response, vulnerability management, and incident response features. Check if your existing cyber insurance can be utilized to cover expenses in case of a breach. Consider whether your organization requires services like vulnerability management and incident response, and choose accordingly.
I rate the product a ten out of ten.
Seamless EDR & endpoint security solution
What do you like best about the product?
The customer support ensure your issue is solved swiftly and effectively. They work 24/7
implementation is easy by a tech savvy person. However, it is not that easy to use by someone without technological knowledge
All the features are security-based. The Analyze CyclanceOPTICS helps you use the management console to querry device data collected by its agent to investigate any security threats and discover any comprise indicators. InstaQuery facet breakdown gives an interactive visual display of the various facets involved in the query so that it is easy to identify and follow the relational path
It enables you to lock an infected device or a potentially infected one, disable its Wi-Fi or LAN network to stop command or control activity, lateral movement of the malware or exfiltration of data.
It helps send actions to devices- here the remote response feature is used to securely execute scripts and run commands.
implementation is easy by a tech savvy person. However, it is not that easy to use by someone without technological knowledge
All the features are security-based. The Analyze CyclanceOPTICS helps you use the management console to querry device data collected by its agent to investigate any security threats and discover any comprise indicators. InstaQuery facet breakdown gives an interactive visual display of the various facets involved in the query so that it is easy to identify and follow the relational path
It enables you to lock an infected device or a potentially infected one, disable its Wi-Fi or LAN network to stop command or control activity, lateral movement of the malware or exfiltration of data.
It helps send actions to devices- here the remote response feature is used to securely execute scripts and run commands.
What do you dislike about the product?
It helps detect all that is deamed malware and provides the right exlusion measure for every detected threat.I
Generally, it has improved from the earlier features in 2020 and what they offer currently is great for various devices. I like it more
Generally, it has improved from the earlier features in 2020 and what they offer currently is great for various devices. I like it more
What problems is the product solving and how is that benefiting you?
It provodes threat detection as well as prevention
Helps identify what is going on with a PC and also helps in resolving the issue.
Since it is a machine learning based approach, it provides real time protection, analytics and results.
It hasped in the deplyment of packages for data collection whereby you are can either use the data collection packages available in the management console or create your own.
Helps identify what is going on with a PC and also helps in resolving the issue.
Since it is a machine learning based approach, it provides real time protection, analytics and results.
It hasped in the deplyment of packages for data collection whereby you are can either use the data collection packages available in the management console or create your own.
The best solution!
What do you like best about the product?
The Arctic Wolf product and team are the all-in-one solution to keep your business on the cutting edge. Their attention to detail and coverage rival top-tier vendors in their fields. From the begining of our relationship they have been forthcoming, easy to use, the integration was painless and the number of features available is outstanding. We use it daily and we don't receive extraneous notifications to clutter up our day. Their customer support is quick, concise and to the point with no fluff.
What do you dislike about the product?
There's not a single thing about Arctic Wolf that we dislike.
What problems is the product solving and how is that benefiting you?
Arctic Wolf alerts us to unauthorized logins from countries outside our own for investigation while their concierge team is always available for questions with quick turn-around. While we may not use every single feature provided to us all year round, we have confidence that all of our sites are protected. We also subscribe to their Managed Security Awareness, which is their phishing campaign sim. The educational moments are valuable, quick and to the point, and has raised our phishing probability scores nearly 200%. Our monthly meetings with the concierge team provide insights and suggestions to improve our security posture and are always open to questions and concerns.
When you want to gain your sleep back
What do you like best about the product?
I like having a team that will notify me 24/7 without hiring a team of my own and will contain the issue
What do you dislike about the product?
The security awareness, but they listen.
What problems is the product solving and how is that benefiting you?
Filtering so we don't get alert fatigue and helping me idently issues so we can fix them.
Fantastic addition to our IT Team
What do you like best about the product?
From Sales to Implementation to Support everyone is stellar. Knowing we have a compitent team of engineers assisting and monitoring our systems 24/7 allows us to focus on completing business objectives. Our team communicates with them daily. Integrations were as simple as securely sending over tokens/api configurations through their portal. They do integrate with most of our primary vendors (Crowdstrike, Palo Alto, Azure, M365, etc.) which makes things easier for us.
What do you dislike about the product?
The MR portal needs a major revamp and same with the ticketing systems. From what we can tell, it is being worked on and it's just a matter of time.
What problems is the product solving and how is that benefiting you?
They're monitoring all our systems and authentication to said systems. They're monitoring and notifying us 24/7 as needed.
Peace of Mind
What do you like best about the product?
We leverage Arctic Wolf to help covers gaps and do quarterly reviews of our security posture.
What do you dislike about the product?
There's honeslty nothing I can think of at the moment. Maybe a bit more clarity on tickets received?
What problems is the product solving and how is that benefiting you?
Arctic Wolf helps us with detecion and reponsding to events that are deemed suspsicious or unsual. We utltize it so that we can have a better grip on our company's security posture.
Particularly valuable for smaller and mid-sized businesses without a dedicated cybersecurity team
What is our primary use case?
For anyone with an IT footprint in today's cybersecurity-aware landscape, considering solutions like Arctic Wolf (MDR is vital. It is not just for giants like banks; it is particularly valuable for smaller and mid-sized businesses without a dedicated cybersecurity team. When your IT environment surpasses about 50 users, that is when the real need for MDR arises. At that point, you start generating substantial security data, and MDR allows you to tap into expert skills to protect your organization effectively.
What is most valuable?
The most valuable aspect of this solution, both for me and my clients, is the managed detection and response component, which is a core feature of the service. However, what sets it apart is the "concierge security team" that provides customers with two dedicated resources for proactive security management. This personalized support, in addition to the 24/7 SOC service, is a significant added benefit.
What needs improvement?
In terms of areas for improvement, Arctic Wolf has been responsive to client feedback. They have addressed issues such as the lack of data exploration tools in the past by implementing solutions that enable clients to better understand the platform's actions. However, to further enhance the service, more integrations with various security tools to improve data ingestion would be beneficial. It is worth noting that I haven't received any negative feedback from clients, so there aren't any specific issues they are unhappy with at the moment.
For how long have I used the solution?
I have been a reseller of Arctic Wolf Managed Detection and Response for over a year.
What do I think about the stability of the solution?
The stability of this solution is robust. It is not a physical product but rather a service, so it doesn't have the potential to go down like a tool or device might. Agents and sensors deployed have failover mechanisms in place to ensure continuous monitoring. 24/7 services are reliable and uninterrupted. In that sense, it is highly stable, given its service-oriented nature.
What do I think about the scalability of the solution?
The scalability of this solution is great. It offers user-based licensing, so if there is an increase in the number of IT users, it can easily scale accordingly. In contrast to other solutions that base pricing on data ingestion, which can be challenging as data grows, user count tends to be more predictable, making this model highly scalable. Arctic Wolf is flexible and works with clients to ensure smooth scaling. Our clients for this solution come from a range of business sizes, primarily focusing on small and medium-sized enterprises. We generally don't cater to large enterprises, but instead, our clients typically fall within the medium-sized category, with user counts ranging from 50 to around 3,000.
How are customer service and support?
Our experience with technical support from Arctic Wolf is mostly handled by the Octopus technical team, who manage support as the reseller. As a result, our role in providing technical support is limited. The concierge security team, a part of the managed detection and response solution, actively engages with clients to offer technical support, identify vulnerabilities, and conduct proactive threat hunting. This means we are less involved in the technical support aspects of the solution. I would rate Arctic Wolf's technical support as a nine out of ten. Their 24/7 availability of highly skilled security engineers who are responsive to phone calls and emails is a significant strength, with room for minor improvements but very effective overall.
How would you rate customer service and support?
Positive
How was the initial setup?
In terms of the initial setup, our involvement is limited as Octopus Deploy handles it directly with the client for compliance and confidentiality reasons. However, the feedback we have received about the setup process has been remarkably positive. It is described as a quick and relatively painless process, typically taking around 30 to 40 days. Even for clients in South Africa, the shipment of sensors and equipment arrives within a month, which speaks to the efficiency of the setup. The choice between cloud or on-premises deployment depends on the client's preference. The solution offers virtual and on-premises sensor deployment options. The setup process is streamlined, with an off-site team collaborating with the client's team. The Security Operations Center is in Germany and works closely with clients for efficient implementation. Clients often install the sensors themselves, and the process is straightforward, making implementation easy.
What's my experience with pricing, setup cost, and licensing?
Arctic Wolf's pricing seems reasonable for the value it offers, and I would rate it at a six out of ten. It is not a low-cost solution, but it provides good value for the investment.
What other advice do I have?
Given the absence of complaints from our customers regarding the solution, I would rate Arctic Wolf MDR very highly, perhaps a ten out of ten. It seems to meet our clients' needs effectively.
It's not just an excellent solution, but CISO-like staffing.
What do you like best about the product?
The advice, guidance, and professional services that come with the solution.
What do you dislike about the product?
It might be a little expensive. False positives, although they aren't many. Historically, they haven't been able to isolate an infected end point. Can they do that now?
What problems is the product solving and how is that benefiting you?
They observe and report vulnerabilities. They detect suspicious activity, both on our network and within our cloud services.
ArcticWolf Security
What do you like best about the product?
The best part about them is the extra set of eyes that are on our whole environment. They are able to monitor everything. They alert us when someone goes on vacation out of the country (that we may not have been aware of), and are able to lock down a machine should a machine become infected with a very serious virus or Ransomware.
The weekly reports are excellent and something I look at everytime they're delivered. I'm in the portal every day looking things over.
The weekly reports are excellent and something I look at everytime they're delivered. I'm in the portal every day looking things over.
What do you dislike about the product?
SOMETIMES there can be an information overload. A lot of info is never a bad thing, but there can be times where its TOO much.
Integration can be hit or miss based on your environment as well. Sometimes the network sensors can appear offline to home base, when they aren't. Overall, these issues aren't enough to cause major issues though.
Integration can be hit or miss based on your environment as well. Sometimes the network sensors can appear offline to home base, when they aren't. Overall, these issues aren't enough to cause major issues though.
What problems is the product solving and how is that benefiting you?
This service is helping to take the security load off of us. While we do receive some alerts (the out of the box ones from Microsoft 365) they are able to actually get down to the computer level and let us know when there are issues with an actual machine that needs rectifying. This allows us in our department to focus on our primary tasks with the knowledge that ArcticWolf's security team is also looking over our shoulder and keeping an eye on the important security things.
showing 71 - 80