Improved threat detection has reduced incidents and has automated investigations with AI
What is our primary use case?
Our main use case for ReliaQuest GreyMatter is to detect any kind of threat, as it is basically able to connect to multiple tools which we are using, such as SIEM, EDR, and cloud logs, for good visibility and holistic visibility.
There was a phishing attempt in the organization six months back that was detected by our use of AI agents in ReliaQuest GreyMatter, which helped us to detect the threats within five minutes.
How has it helped my organization?
ReliaQuest GreyMatter has helped us to reduce security incidents by 89%, which is a significant amount of incidents we have seen.
This 200% ROI is coming from all aspects of our savings, mostly the cost saving in software purchasing as well as the cost saving in case of security concerns.
The reduction in triage is another benefit we have seen.
What is most valuable?
There are multiple features of ReliaQuest GreyMatter which I love personally. The agentic AI, which helps in autonomous investigation and containment, is multiplying the speed of the task to be done.
Features such as managed service integration and MDR with human expertise when needed are some major features which I love about ReliaQuest GreyMatter.
What needs improvement?
If I need to suggest something which can be improved, then definitely it would be in case of the UI, which could be improved.
The UI is the only concern from my end. Apart from that, I do not feel that anything needs to be changed.
For how long have I used the solution?
I have been working in my current field for the last seven to eight years.
What do I think about the stability of the solution?
ReliaQuest GreyMatter is definitely a stable solution. We did not face any kind of problems or challenges while using it.
What do I think about the scalability of the solution?
ReliaQuest GreyMatter is definitely a scalable solution. We can scale up or down easily as per our needs.
How are customer service and support?
Customer support deserves a 10 out of 10. They resolved my query within 35 minutes regarding an update issue.
How would you rate customer service and support?
How was the initial setup?
The deployment of ReliaQuest GreyMatter was pretty straightforward. It was done within a day with the help of the ReliaQuest team.
The configuration process is really good, and we were able to configure the solution well.
What about the implementation team?
ReliaQuest GreyMatter integrates with almost all the solutions we are using seamlessly without any problem in the connectors.
What's my experience with pricing, setup cost, and licensing?
Pricing, setup cost, and licensing has been really good as compared to other solutions.
The metering and the billing experience has been a game changer for us, as we got really good discounts and contracts based upon our use cases.
Which other solutions did I evaluate?
We have definitely evaluated multiple options such as GreyMatter, Cortex, SIEM, CrowdStrike, and SentinelOne as alternatives while purchasing the software.
What other advice do I have?
Anyone looking for a really good response solution with autonomous capabilities should definitely consider ReliaQuest GreyMatter.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Exceptional Visibility and Ease of Integration for Security Teams
What do you like best about the product?
ReliaQuest GreyMatter provides exceptional visibility across our company's entire security stack. The integration with SIEM and EDR tools was seamless, and the platform's ability to normalize and correlate data from multiple sources saves us countless hours. The dashboards are intuitive, and the threat detection capabilities are top-notch.
The benefits of having RQ GreyMatter:
- Centralized visibility across IT and OT environments
- Faster detection and response
- Great support and proactive threat intelligence
What do you dislike about the product?
There is a learning curve when setting up advanced automation workflows, but once through all that the documentation and support team make it manageable.
What problems is the product solving and how is that benefiting you?
Consolidates alerts from multiple security tools (SIEM, EDR, IDS) into a single platform. Integrates threat intelligence for faster context gathering. Acts as a “force multiplier” by integrating Splunk, CrowdStrike, and other tools into one operational view.
Responsive Team That Drives Continuous Improvement
What do you like best about the product?
they are not perfect from start but they are responsive to our feedback so we can improve here and there continuously.
What do you dislike about the product?
some automated rules sometimes performed undesirable actions, for this, we need to spend time working with them to fine-tune the rules.
What problems is the product solving and how is that benefiting you?
24/7 monitoring with low false positive rate.
great security intel and DRP
Effortless to Use, Stellar Security Integration
What do you like best about the product?
I really like the broad range of capabilities that ReliaQuest GreyMatter can integrate with. Its unified use cases across different products are excellent, allowing seamless integration whatever type of system you have, provided it has an API. This flexibility gives us the ability to implement custom playbooks and workflows effectively. The product has reached a point where it could potentially eliminate the necessity for a fully managed SOC capability, which is a significant advantage. Moreover, the initial setup was straightforward and involved mainly API integrations, making the process very easy. We are also enjoying a very good customer experience, which adds to the overall satisfaction with the service.
What do you dislike about the product?
None
What problems is the product solving and how is that benefiting you?
I use ReliaQuest GreyMatter for security operations, acting as our first line of defense by managing alerts and escalating crucial positives. It also monitors the dark web for threats and integrates broadly, supporting custom workflows and use cases across various APIs, reducing dependency on a fully managed SOC.
Perfect Tool for Tech Enthusiasts
What do you like best about the product?
I like the fact that ReliaQuest GreyMatter helps me connect to the technical world. It offers a really technical and complex environment which I find beneficial for my understanding and engagement with technology. This platform provides me insights and hands-on knowledge that are essential for using technical equipment more effectively. The withstanding technical complexity is an advantage as it allows me to dive deeper into the technological aspects, which I enjoy and find extremely valuable. Overall, ReliaQuest GreyMatter is a perfect solution for my needs.
What do you dislike about the product?
Nothing
What problems is the product solving and how is that benefiting you?
I use ReliaQuest GreyMatter to connect with technology better, gaining insights and hands-on knowledge about technical equipment, solving my technological misunderstandings.
Unified SOC Management Made Effortless with GM
What do you like best about the product?
GM acts as an efficient abstraction layer, bringing together all aspects of SOC data and workflows within a unified, user-friendly interface. This interface becomes the "single pane of glass" for monitoring, reviewing, alerting, and escalating all activities within the SOC. AI capabilities are also becoming a very welcome addition in streamlining investigations and threat hunts.
What do you dislike about the product?
I haven't noticed any issues. GM has truly set a new standard for SOC automation.
What problems is the product solving and how is that benefiting you?
The solution tackles the problem of overwhelming alert volumes and the lack of cohesive visibility caused by using several disconnected security tools. By offering unified visibility across different security environments, it helps minimize alert fatigue and makes sure that important threat signals are not overlooked amid the noise. It really boosts the capacity of security teams, enabling smaller teams to achieve the work output of much larger ones while reducing burnout.
Easiest Decision
What do you like best about the product?
Everything is in one place, now that they've added the ability to do the API integrations yourself and give you access to the actual documentation all in one place is fantastic. We have onboarded so many more things now because we have that ability. We also like that there's a mobile app. It makes it easy to see what's going on at all times. We use it honestly all the time. The few times we've had a few questions or even had a few problems we were able to get support on it right away. The team at Reliaquest is super efficient and is willing to jump on a call with you so quickly. We had it up and ready to use I would say pretty fast, and it's been so nice ever since.
What do you dislike about the product?
Right now, there's not a whole lot. The only complain is that service now is still an issue but soon that will all be in grey matter anyway.
What problems is the product solving and how is that benefiting you?
For us it's a managed SOC, we use them for pretty much everything security operations related. We integrate so many things to have one place to get alerted on it.
