Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Excellent tool for teams using detection as code
What do you like best about the product?
Panther is incredibly responsive - it's a definite partnership. The team continues to develop features with input from customers about what is most needed. The ability to write detections in Python is very helpful. New feature rollouts make creating detections and doing searches more accessible to less technical employees. The ability to truly implement detection as code is really cool, but it's not a must to implement Panther. The flexibility of ingesting anything you can get to S3 introduces some up front work, but once a process is established, custom ingestions can be done quickly.
What do you dislike about the product?
Panther lacks some functionality you expect from the typical SIEM - visualizations specifically lag, but this can be addressed with other tools. There is a fairly steep learning curve if you are not experienced with Python, SQL, and YAML. However, all SIEMs have a fairly steep learning curve. If your team has some experience with development, the languages should be familiar and easy to get the hang of how Panther uses them.
What problems is the product solving and how is that benefiting you?
Centralized monitoring, detection, and response. Ingesting data via API is straight forward and can be largely templatized for efficiency. Recent additions to ingestion options (like webhooks) will continue to make ingestions more efficient. The ability to work in code is a major benefit for teams committed to a CI/CD environment.
- Leave a Comment |
- Mark review as helpful
Flexible and Robust - a Modern SIEM
What do you like best about the product?
The ability for our detections to be as simple or complex as Python allows is the most significant benefit to Panther as a SIEM. While specific log sources don't necessarily need this, custom log sources (such as an organization's app logs) benefit tremendously from this added flexibility. Panther helps foster collaboration in our environment and provides a tool to which all of Engineering can contribute. The ability to embed our alert building into our existing SDLC to ensure proper custody and approvals before going into production is tremendous. As a partner, Panther is transparent and always provides constant opportunities for feedback and service improvement. The community is growing faster everyday and there are always new alerts being offered for adoption by all of the community.
What do you dislike about the product?
While it doesn't impact our team, a non-technical Security team could struggle to realize all of the benefits of a SIEM like Panther vs some of the drag-and-drop competitors.
What problems is the product solving and how is that benefiting you?
Panther helps us solve our problem of centralized visibility and monitoring of our many (often custom) log sources. As a SIEM Panther excels at providing robust and custom alerting mechanisms so we can build out world-class detection and response capabilities.
A great and convenient SIEM product to transition to
What do you like best about the product?
Overall a very positive experience. It was very easy to deploy and the how-to's and guides throughout were really helpful to help guide and integrate through the new security system.
What do you dislike about the product?
I feel that there's too much coding needed if you want to fine tuning inclusion and exclusion criteria. These can use more automation and promote more user-friendliness.
What problems is the product solving and how is that benefiting you?
Panther integrates with various threat intelligence sources, providing up-to-date information on known threats and vulnerabilities. This integration enables the system to correlate real-time events with threat intelligence data, enhancing the accuracy of threat detection and response. The seamless integration with external sources ensures that organizations stay one step ahead of emerging threats.
Panther.io -- Modern Security Analytics, Detection & Response
What do you like best about the product?
Modern, cloud-based architecture. Bring your own Snowflake. Detection as Code (Python & SQL).
What do you dislike about the product?
Response workflow creation (what to do with a detection) is lackluster and underdeveloped.
What problems is the product solving and how is that benefiting you?
Log source integration into Snowflake. Detection as code, many good detections out of the box. Security Analytics is super simple, I don't have to worry about any details on the ingest or warehouse. Snowflake storage is super cheap. Amazing post-sales and support team.
Panther - The Best SIEM & Shadow IT!
What do you like best about the product?
Panther is a clear winner for ease of deployment and usability. Their support and customer-success team is very communicative and eager to help. No coding is necessary to integrate the data sources we needed in our tech stack.It has out-of-the-box detections which are immensely useful when you have a very small IT/Infosec Team. The notification setup and Slack integration are seamless. I also love the How-To's for integrations and notifications , which are very well-written
What do you dislike about the product?
The only improvement I wanted when I started using panther in 2021 was to have assignment for the alerts so that I know who is working on the issue. The Customer Success & Product Team took our feedback & got this rolled out. Now I am happy & there isnt anything I dislike about Panther
What problems is the product solving and how is that benefiting you?
We have a small team & Panther Tool seems to work as a SOC for us. It makes my team's life easier by automated out of the box detections & log analysis
Alert Destination features for our Amazon SQS and SNS services are effective for health notification
What do you like best about the product?
We enable one-way alert synchronization between the Panther console and our incident management platform to generate real-time notifications & updates. Pulling MongoDB and AWS DynamoDB logs is done seamlessly through Panther APIs. To improve detection match rates, we use its Data Replay processing to get transparency about event triggers.
What do you dislike about the product?
Updation in CloudFormation deployment parameters is required in Panther's backend framework. This will help us to orchestrate our infrastructure monitoring better and reorganize our rules, queries and customer policies. All other features for custom detection, log analysis, and notification is excellent with Panther.
What problems is the product solving and how is that benefiting you?
Panther gives the privilege to write custom detections & queries for our audit logs for ingesting security events. By enabling its Data Replay, we effectively reduce the time taken to load events and create its retention policy. For real-time health notifications, we integrate Panther with our Amazon Simple Notification Service (SNS) and regulate mail alerts through Simple Queue Service (SQS) for all business-critical applications. We can also override these destination alerts with either rule-based or policy-based metadata inclusions.
Overall a great SIEM
What do you like best about the product?
Having the scalability and flexibility to create an overall positive user experience
What do you dislike about the product?
The UI is not optimal for my workflow. Having to switch between tabs can be cumbersome
What problems is the product solving and how is that benefiting you?
Having a secure solution in the SIEM space is rare
"Panther is an easy-to-use, scalable SIEM."
What do you like best about the product?
Panther handles high-volume cloud security log streaming. We tested its capacity to process data from various cloud services and found that it worked fine with AWS, OKTA, and G Suite. The product's out-of-the-box alerts and detections were helpful. Panther is built on Snowflake, which helped us quickly make a backend data warehouse. Panther is a scalable SIEM, enabling us to write detection definitions as code and then automatically push those definitions to our Panther deployment. It is a powerful detections-as-code feature that can make a private copy of this repository to manage custom detections. The back end scales as needed, so we no longer manage servers, load balancers, and other infrastructure for our old SIEM.
What do you dislike about the product?
The number of customers is still pretty small, and we'd like to have a bigger group of customers with whom we could share ideas. Since detection as code is new, we'd love an online community or user group to exchange rulesets and discuss best practices. Panther has few native integrations, and ingesting data from some sources can be difficult. It also needs more integrations, finer exclusions and allowlists, and resolution/status options in case management.
What problems is the product solving and how is that benefiting you?
Panther has been a fantastic partner, and their product is truly next-gen. It helped us design a robust detection and incident response program using test-driven development and detection-as-code. We can create powerful detection rules that call REST services, integrate external libraries, and manipulate alerts fluidly. Positive experience overall about Panther's team is responsive, mission-driven, and workable. After watching a Snowflake webinar, we saw a demo, did a POC, and bought it. The product's cloud-first approach has many benefits, which was one of our drivers.
Tech Savvy and User Friendly Design
What do you like best about the product?
Log monitoring with Panther is like childs play. I havnt seen any other log monitoring tool with such an ease of use.
What do you dislike about the product?
Nothing so far that i have encountered with this tool
What problems is the product solving and how is that benefiting you?
Service logs, Cloud App Monitoring, logs monitoring
They are great to work with and get the job done
What do you like best about the product?
They made the language and the coding simple. They also took our challenges of traditional SIEM away.
What do you dislike about the product?
It was a bit tough to use but that was to be expected.
What problems is the product solving and how is that benefiting you?
They have helped us a great deal, mainly with speed, and real-time alereting and detection.
showing 1 - 10