Exaforce
ExaforceReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
6 reviews
from
External reviews are not included in the AWS star rating for the product.
Exaforce Quickly Surfaces Top Security Risks and Cuts Log Noise
What do you like best about the product?
I’m particularly impressed with how Exaforce correlates disparate signals to highlight the most pressing security concerns. It’s drastically reduced the manual effort of sorting through logs, letting us focus our energy where it’s needed most. Shang’s guidance was a key factor in helping us realize these benefits almost immediately.
What do you dislike about the product?
Some of the data source takes time to onboard and our admin need periodically add new permission. From security point of view this may make sense. The UI has a lot of dashboard and data, I feels it's a bit complex need to get improved.
What problems is the product solving and how is that benefiting you?
Exaforce excels at triaging complex alerts from multiple sources like MDE, Entra, and Network Security tools. Exabot's ability to correlate data across these silos has drastically cut our manual workload, it's like having an extra 3 to 5 SOC team members on board. We also highly value the proactive hunting provided by the MDR team, who consistently scan our environment for the latest threats and help us identify hidden issues early on.
Robust Security Monitoring with Excellent Support
What do you like best about the product?
I really like Exaforce's technical team who hold weekly chats with us to go over any incidents that have occurred and keep us informed. I also find it convenient that Exaforce collects data from a lot of sources like AWS and GCP, integrating everything in one place. This comprehensive data integration makes it easy to have an overall view of everything.
What do you dislike about the product?
We noticed that Exaforce's data source support is not very extensive for certain cases. We need data from our Cloudflare, but they don't directly access data from it. We have to store it in AWS S3 first, then Exaforce can pick it up. This makes accessing some data sources not straightforward and may increase our storage costs. That's something Exaforce can improve.
What problems is the product solving and how is that benefiting you?
I use Exaforce to automate security operations by detecting abnormalities and notifying us about any misuse. It's available 24/7, providing comprehensive security monitoring. The platform helps in identifying compromised packages and reduces false positives, allowing us to focus on important issues.
Accurate, Fast Triaging with Clear, Verifiable Investigations
What do you like best about the product?
Triaging is both accurate and fast. Investigations clearly show which systems and data are affected, along with reasoning we can verify. It’s also extensible with Automation Agents, which helps us automate the tasks we need to do.
What do you dislike about the product?
Automated enrichment maps alerts to our specific architecture, identifying which instance, databases, or integrations are involved. We can assess blast radius immediately instead of manually tracing through logs and application connections.
What problems is the product solving and how is that benefiting you?
We needed SOC capabilities without hiring a full security team. Exaforce handles investigation work that would require multiple analysts, while giving us the audit trail and documentation healthcare compliance demands.
Agentic AI That Nails the First Pass on Security Events
What do you like best about the product?
Agentic AI taking a first pass at all security events.
Ease of Use, Integration, and Implementation
Customer Support
Native support for many important log sources
Ease of Use, Integration, and Implementation
Customer Support
Native support for many important log sources
What do you dislike about the product?
Still developing some ingestion techniques
What problems is the product solving and how is that benefiting you?
Exaforce is helping us solve our SOC overload. The agentic AI and MDR work together to only bring true incidents to our security team and provide actions to quickly respond.
Collaborative, AI-Powered Security Operations
What do you like best about the product?
I like Exaforce's approach to Security Operations. They have both human review and an AI platform to facilitate better data ingestion, alerting, case management, and investigation. They're very receptive to feedback and are collaborative on new features they release as well as one they want to develop. My team uses Exaforce almost every day for some sort of look up, investigation, or continuing to build out remediation automation.
What do you dislike about the product?
So far no major dislikes. Everything we have asked them to work on they have either built or have added to the backlog with a status in our bi-weekly meetings.
What problems is the product solving and how is that benefiting you?
Exaforce is solving security operations at scale for us. Because of Exaforce We have been able to hire folks for other ares of security while Exaforce helps us scale detection, response, investigations, and more.
Cuts Through Alert Noise and Speeds Investigations from Hours to Minutes
What do you like best about the product?
Exaforce does a fantastic job of surfacing only the findings that truly matter and warrant further investigation. It cuts down on noise and helps us stay focused on what’s important. Exabot search also speeds up our workflow by reducing the time it takes to investigate, remediate, and contain alerts—from hours down to minutes. Adding custom data sources is very easy and the support team is fantastic at helping us troubleshoot issues and work through feature requests.
What do you dislike about the product?
Sometimes the interface is extremely slow to load. Also complex queries and large datasets can fail to load.
What problems is the product solving and how is that benefiting you?
Exaforce helps us achieve 24x7x365 coverage for our security monitoring and response. It saves us from having to hire at least three or four security analysts just to monitor and investigate every alert we’d receive with a traditional SIEM.
showing 1 - 6