Plerion Cloud Security Platform - Agentless CNAPP with Pleri AI

What do you like best about the product?

The biggest benefit of Plerion is the context-based prioritisation. Unlike other tools that just use CVSS scores, Plerion evaluates findings against our actual environment, so my team only spends time on real, exploitable risks. The automation of triage and the unified view across teams have reduced wasted effort and improved collaboration. Now, findings come with context and remediation, so we focus on scheduling fixes instead of debating if something is a real problem.

What do you dislike about the product?

I'd like to see improvements in how the platform handles auto-exemptions for low severity CVEs. There's also room for smarter tailoring of profile vulnerability exemptions and Code Security Issue exemptions to better fit our specific needs.

What problems is the product solving and how is that benefiting you?

Plerion evaluates findings against the actual configuration and reachability of our environment, rather than scoring them on CVSS alone. As a result, we’re no longer treating purely theoretical critical issues as urgent.

What do you like best about the product?

Plerion excels at reducing "alert fatigue." Instead of flagging every single isolated misconfiguration, it correlates assets, identities, and vulnerabilities into realistic attack paths. (For example, it will highlight a low-priority misconfiguration if it is combined with an over-privileged identity and an exposed workload).

What do you dislike about the product?

Some enterprise users note a desire for deeper, more advanced customization options for reporting, security dashboards, and custom policy management to support highly specific organizational workflows.

What problems is the product solving and how is that benefiting you?

"Code-to-Cloud" Traceability: It integrates deeply into CI/CD pipelines (GitHub, GitLab, Bitbucket) to catch Infrastructure-as-Code (IaC) misconfigurations, secrets, and vulnerable dependencies before they are deployed, and can trace runtime cloud risks back to the specific developer and line of code that introduced them.

What do you like best about the product?

Plerion has been useful for catching misconfigurations across our cloud infrastructure before they turn into actual security incidents, giving us visibility we wouldn't easily get through manual audits alone. The dashboard is clean and makes it easy to prioritize which misconfigurations need immediate attention versus lower-risk items, without needing deep security expertise to interpret findings. It integrates natively with our Google Cloud environment, so setup didn't require building a separate monitoring pipeline. Performance is solid, with continuous scanning that surfaces issues quickly rather than relying on periodic manual audits. Pricing has offered reasonable ROI given the security incidents it's likely helped us avoid, and onboarding was straightforward once the initial cloud connection was configured. While it's not built around conversational AI, its automated detection logic has consistently surfaced risks we wouldn't have caught manually in a timely way.

What do you dislike about the product?

Some flagged misconfigurations turned outSome flagged misconfigurations turned out to be intentional based on our specific setup, requiring manual review to distinguish real risks from false positives, which added some friction early on. Initial setup and connecting it properly to get accurate, relevant results took more configuration than expected. Support response times for more nuanced configuration questions were slower than ideal during onboarding. Pricing scales with the size of the infrastructure being monitored, which becomes a bigger consideration as our cloud footprint grows. to be intentional based on how our specific setup works, requiring manual review to distinguish real risks from false positives. Initial setup and connecting it properly to our cloud environment took more configuration than expected to get accurate, relevant results. Pricing scales with the size of the infrastructure being monitored, which becomes a bigger consideration as our cloud footprint grows.

What problems is the product solving and how is that benefiting you?

Plerion has given us continuous visibility into potential security misconfigurations across our cloud infrastructure, catching issues that would be easy to miss through periodic manual reviews alone. This has strengthened our overall security posture, letting us fix risky configurations proactively rather than discovering them after an incident, without needing to build custom monitoring infrastructure ourselves.

What do you like best about the product?

I love how Plerion's AI-driven platform has automated and enriched our entire security workflow. The single-pane-of-glass view across AWS and Azure, contextual CVE analysis, and developer-native remediation guidance have drastically reduced manual triage and ticketing overhead. The ability to prioritize real risks, automate reporting, and deliver actionable remediation directly in our team's existing tools has let us scale our managed security practice without simply adding more people.

What do you dislike about the product?

If I had to mention a downside, it would be that building out the multi-tenant prompt framework and integrating with our unique workflows required some upfront investment and collaboration. However, the long-term efficiency gains have more than justified the effort.

What problems is the product solving and how is that benefiting you?

Managing multiple threats and vulnerable package management gives us a single pane of glass to see what’s truly critical to the business and needs patching now, rather than relying only on a High or Critical CVSS score.

What do you like best about the product?

It eliminates alert fatigue by cutting through the noise of multi cloud environments

What do you dislike about the product?

The platform’s collaborative features could be stronger. The batch triage process still demands consistent manual review and team discipline

What problems is the product solving and how is that benefiting you?

It acts as a cloud native application protection platform that maps the entire ecosyste into a unified graph, it correlates infrastructure, identities and code to pinpoint the top 1% of the risk. for me ,it helps me reclaim the engineering bandwidth, reduction in mean time to repair, comprehensive data security posture.

What do you like best about the product?

It's fundamentals. Plerion doesn't play tricks with noise and false positives - it identifies the risks that actually matter and surfaces them with context. Security teams are drowning in alerts from traditional tools. Plerion solves that problem. But what really differentiates Plerion is Pleri, their AI cloud security engineer. It actually does the work. That's a fundamental operating model shift, not another incremental "optimisation" to an old approach.

What do you dislike about the product?

Although cloud adoption is growing, in many Asian markets such as South Korea, critical organizational data is still managed in on-premises environments or isolated within air-gapped or network-segregated internal systems.

Plerion is an excellent cloud security solution. However, if it could also scan and assess data residing in these network-segregated on-premises environments, it would address a much larger market opportunity and significantly expand its adoption across Asia.

What problems is the product solving and how is that benefiting you?

Customers can leverage Pleri AI to adopt security best practices and simplify many time-consuming and repetitive tasks. This leads directly to improved operational efficiency and reduced costs.

The core strength of Plerion is that it is an AI-powered CNAPP, with Pleri serving as a true AI security engineer rather than just an assistant. I look forward to seeing Pleri continue to evolve and deliver even greater capabilities in the future.

What do you like best about the product?

I really appreciate how Plerion helps us focus on what actually matters by giving targeted, prioritised recommendations instead of overwhelming us with alerts. The contextual exploitability analysis is a game changer, letting us address the most relevant risks without wasting time on low-priority issues. Integrating code security into our PR workflow means we catch problems early, and the platform makes it easy to find and clean up legacy resources that were cluttering our environment.

What do you dislike about the product?

If I had to point to a downside, it’s that adopting a batch-driven approach still requires some manual effort to triage findings. While this is a big improvement on being buried in automated tickets, it does mean we need to stay disciplined about conducting regular reviews. There’s also a bit of a learning curve in understanding how to get the most value from the scanning controls and risk prioritisation features.

What problems is the product solving and how is that benefiting you?

We use Plerion to cut through the noise and focus on the security issues that actually matter. It helps us understand what is most important to look at and remediate, and then track our progress over time. Before Plerion, it was hard to prioritise and we spent a lot of time chasing low‑impact items. Now we have much clearer visibility of our risk, can make better decisions about where to invest effort, and can demonstrate improvement to the business with real data.

What do you like best about the product?

I love how Plerion consolidated our cloud security visibility and enabled us to scale without manual overhead. The onboarding was quick, and configuring custom asset groups unlocked real value for prioritising vulnerability management by business impact. The AI-driven Pleri handles remediation planning, reporting, and data extraction, saving us countless hours. Integrations with Jira and Slack are transformative, letting findings flow directly to our ticketing system with the right context for developers.

What do you dislike about the product?

The main area for improvement is collaboration—I'd like to see better support for sharing tasks, reports, and saved prompts across the organisation. Once we can manage and share these as a team, the platform will be perfect for our needs.

What problems is the product solving and how is that benefiting you?

Before implementing Plerion, we had limited visibility into vulnerabilities across our AWS environments. While AWS native alerts provide some level of monitoring, they are fragmented and require significant manual effort to consolidate and analyse.
Monitoring multiple environments became operationally challenging and time-consuming, making it difficult to prioritise risks and ensure we were addressing the most critical issues in a timely manner.

What do you like best about the product?

I really appreciate how Plerion's AI-assisted analysis reasons about vulnerabilities in the context of our actual infrastructure, reducing noise and surfacing what actually matters. The memory feature that encodes our service-to-team ownership has made automated ticket routing seamless, and the consolidation of configuration, identity, and vulnerability scanning into a single platform has eliminated unnecessary context-switching. The vulnerability analyst stands out by providing exploitability analysis specific to our environment, shifting us from reactive review to proactive, contextualised prioritisation. Overall, it's freed my time to focus on strategic work, not just triage.

What do you dislike about the product?

While the platform is excellent overall, the automated ticket workflow still needs refinement. Right now, it delivers comprehensive remediation plans, but we're working on making it provide step-by-step triage guidance instead. This would help developers address issues more efficiently without being overwhelmed by too much information at once.

What problems is the product solving and how is that benefiting you?

Visibility and Security Management of our AWS Platform

What do you like best about the product?

I really appreciate how Plerion has centralized our security management across multiple AWS accounts, giving us a holistic view of our security posture. The onboarding was stellar, and the platform was easy for our DevOps team to adopt without deep infrastructure expertise. The centralized dashboard and the AI teammate, Pleri, make it easy to see top risks and get practical remediation advice. It has saved us the cost of hiring a dedicated security specialist and made security part of our daily workflow.

What do you dislike about the product?

While Plerion covers a lot, I would love to see it further consolidate our security stack by integrating code and dependency scanning. Currently, we still rely on external services for those needs, and having everything unified within Plerion would reduce our tool count and further streamline our processes.

What problems is the product solving and how is that benefiting you?

Before Plerion, we had several AWS cloud security monitoring services in place, but the volume of alerts made it difficult to quickly identify what actually needed attention. There was a lot of noise to work through, and AWS native tooling doesn't provide remediation guidance, so for every flagged issue our team had to independently research the right fix, which added real time overhead.

Plerion solved both of those problems. It separates signal from noise intelligently, so we're focused on what genuinely matters, and the AI assistant provides contextual remediation suggestions directly alongside each finding — significantly reducing the time we spend resolving issues.

The multi-account dashboard has also been a big win. We have multiple AWS accounts across dev, staging and production, and having a single place to view our overall security posture and drill into specific accounts has removed a lot of friction. The IAM permissions monitoring has been particularly valuable — Plerion surfaces elevated permissions across our accounts and suggests remediation steps, making it practical to systematically work through permission hygiene at scale.

Overall it's made our security operations meaningfully more efficient and given us clear visibility across our entire AWS footprint.