Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Sysdig is the best tool for Kubernetes image scanning and patch management.
What do you like best about the product?
Sysdig provides a powerful engine to scan images on the fly, generating alerts and valuable insights in which assets may be vulnerable. Also, it gives you the correct version to patch, making it easy to correct such issues. It is easy to deploy and operate and the customer service is top-notch.
What do you dislike about the product?
I wish Sysdig's cloud-native solutions would work better in conjunction with AWS. The Cloudtrail connector does not deliver as much value as the image scanning tools. I wish Sysdig's cloud connector could gather more information about vulnerabilities in a given account and gives us pathways towards a more safe cloud environment natively without having to deploy additional resources.
What problems is the product solving and how is that benefiting you?
Image Scanning and patch management, giving us vulnerable images that need attention and which version to upgrade to, making our Kubernetes cloud environment safer.
Recommendations to others considering the product:
If you are looking for a CSPM that will help you in making your environment safer, Sysdig's for you.
- Leave a Comment |
- Mark review as helpful
Sysdig: a great container scan
What do you like best about the product?
With the ease of integration with pipelines and functioning in clusters, we can fix vulnerabilities in images before its deploy and after deployment. Support is fully available when we need it
What do you dislike about the product?
We work by fixing the vulnerabilities of the images, so sometimes the vulnerable library is a dependency of a dependency and it is not always so easy to identify how to fix it.
What problems is the product solving and how is that benefiting you?
We have scans that locate possible vulnerabilities in code, but the process of analyzing the images is more complicated, Sysdig helps us to scan our containers and find the vulnerable libraries/packages.
Sysdig Secure on OpenShift
What do you like best about the product?
The capture feature is really interesting
What do you dislike about the product?
The price is calculated by the number of agents. The cost is rising quickly while using virtual workers.
What problems is the product solving and how is that benefiting you?
Find vulnerable applications
Excellent Product and Service
What do you like best about the product?
Its out of box FALCO rules and evaluation against various governance frameworks make Sysdig Secure one of the most outstanding products in the market.
What do you dislike about the product?
Nothing much other than bring on prem version closed to the SaaS offering in less timeframe.
What problems is the product solving and how is that benefiting you?
Provides in depth information around vulnerabilities as well as container runtime monitoring to detect anomolies in realtime.
Very powerful security solution.
What do you like best about the product?
The visulization of security and monitor.
What do you dislike about the product?
The web console is a little bit complicated and not easy to follow.
What problems is the product solving and how is that benefiting you?
Docker image scanning, docker container monitoring and integration with splunk.
Great visibility, great detection capability, growing operational capabilities
What do you like best about the product?
Granular host, container, K8s visibility
Consistent vulnerability scanning policies locally and at pipeline
Great product support
Solid product roadmap and regular feature updates
Consistent vulnerability scanning policies locally and at pipeline
Great product support
Solid product roadmap and regular feature updates
What do you dislike about the product?
Feature updates can often render existing configuration or content useless leading to rework -- policy configuration, exceptions etc.
It is difficult to monitor the state of detected vulnerabilities or detected events.
It is difficult to monitor the state of detected vulnerabilities or detected events.
What problems is the product solving and how is that benefiting you?
We had an incumbent vulnerability scanning tool that delivered too many false positives and had insufficient attributes to enable effective tuning. Sysdig solved that - and now enables scanning across all stages of development.
We had limited visibility of our K8s infrastructure. Sysdig solved that - and now offers detection use cases too.
We had limited visibility of our K8s infrastructure. Sysdig solved that - and now offers detection use cases too.
Great addition to security tooling portfolio giving runtime threat and vulnerability insights
What do you like best about the product?
The runtime scanning of workloads combined with threat intelligence/insights makes prioritisation easier
What do you dislike about the product?
I've been advised it's in the roadmap but the ability to ignore or whitelist vulnerabilities
What problems is the product solving and how is that benefiting you?
Visibility into threats of runtime workloads was the main driver for looking into a tool like Sysdig Secure
Recommendations to others considering the product:
Great for customers who are cloud native and run Kubernetes workloads
Solid product and professional service
What do you like best about the product?
Sysdig secure provides well-rounded vulnerablity management and in-depth insights for security personal, software developer, adminstrator and managers to grash secure posture at all times.
What do you dislike about the product?
Not really found any. It does provides what we're look for and fully covers entire SDLC , range from software development pipeline on developers side, to operating envionments.
What problems is the product solving and how is that benefiting you?
It scans and reports vulnerabilities in application software, OS, containers and linux hosts. With insights provided, I obtain a clear view of securtiy posture as needed.
Customizable Security That Keeps Getting Better
What do you like best about the product?
We started our journey with Sysdig because of the flexibility of the underlying Falco rules engine. What has kept us with Sysdig is that flexibility along with continued feature additions that continually add greater value. We started with Container Security and now have CSPM, deep vulnerability information and the beginnings of infrastructure-as-code policy enforcement and drift control. In addition, their customer service is stellar. They keep us up-to-date as a customer with their roadmap and take our feedback seriously leading to great product rollouts.
What do you dislike about the product?
As with all alerting systems it can be difficult to get signal from the noise. The continued feature additions, especially rule exceptions and the automated tuner have greatly reduced the cycle time required to bring down the noise. I appreciate the focus by the Sysdig team in this area. Like all tools, it's an ongoing process to keep alerting trimmed to what's important.
What problems is the product solving and how is that benefiting you?
Sysdig Secure gives us amazing visibility and security awareness for our container workloads. We are able to understand not only how are containers are behaving but what seems to be out of the ordinary and how to take action to get more information or kill the workload. We save massive amounts of time researching whether our workloads are impacted by recently released critical CVE's b/c we can quickly run reports that tell us the impacted workloads and help us prioritize getting them patched. Sysdig is also constantly updating the rules library allowing us to take advantage of their threat research rather than having to create our own rules to address threats.
Recommendations to others considering the product:
Advice for those looking at Sysdig Secure is to consider how well you understand the rules and policies you're implementing and how easy those will be to manage in the future. That is an inherent part of Sysdig Secure and what makes the platform usable and customizable. Other platforms we researched made this much less straightforward and customization was lacking. Definitely take a look at the Falco opensource engine and even take it for a test drive to see if you like the way it works. Sysdig Secure is a step up from Falco in features and functionality but the roots are the same which is what makes it great.
great tool to secure you AKS workloads
What do you like best about the product?
Proactively scan your images and its flexible policy enforcement. Also, The deep visibility and assurance that using syscall monitoring gives us in our runtime environment for security issues. Ability to forward security events to Microsoft Sentinel with seamless integration. Out Of Box runtime security rules and policies covering common security events.
Deep understanding of command execution within your containers providing forensic like events
Azure DevOps extension to inject a task into the pipeline for image scanning during you CI/CD
Deep understanding of command execution within your containers providing forensic like events
Azure DevOps extension to inject a task into the pipeline for image scanning during you CI/CD
What do you dislike about the product?
It generates a lot of events OOB so you have to invest some time fine-tuning your policies to remove unnecessary events. Service Account token generation is not currently available. We hope to see seamless integration with the Azure platform in regards to Regulatory Compliance as it is already available for AWS
What problems is the product solving and how is that benefiting you?
We used to have issues with another image scanning engine as it had inflexible policies, this caused issues with our development teams. The Sysdig image scanning policies are much more flexible, allowing us to strike a better balance between security and usability.
Before Sysdig we had no visibility into what was being executed in our AKS environment; we now have deep visibility into all actions taken regardless of whether they are in containers or hosts.
Before Sysdig we had no visibility into what was being executed in our AKS environment; we now have deep visibility into all actions taken regardless of whether they are in containers or hosts.
Recommendations to others considering the product:
Sysdig it's a SaaS Product that provides easy setup and you can start with a free trial to check its benefits.
showing 51 - 60