Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Next gen open alert SIEM
What do you like best about the product?
The integration and API mostly the alerting system
What do you dislike about the product?
Poor response time from developers and no vendor support
What problems is the product solving and how is that benefiting you?
Traditional SIEM alerting is costing for integrate with group aleart system but the benefits is using panther it's free
- Leave a Comment |
- Mark review as helpful
The next iteration of a modern SIEM! Detection-as-code done right!
What do you like best about the product?
Speed to value.
For the past several years, I've been a huge advocate of getting detection engineering to model modern software engineering with version control, test cases and leveraging community contributions. It's normally been things we have had to implement ourselves.
With many legacy solutions, it can take months to get something working. We were able to get a fully functioning SIEM with corporate logs, cloud logs and detections turned on within days.
The built in primitives that let you test your detections as you develop them was 🤯. Very well thought out and out of the box has things I used to have to spend weeks building with prior solutions.
For the past several years, I've been a huge advocate of getting detection engineering to model modern software engineering with version control, test cases and leveraging community contributions. It's normally been things we have had to implement ourselves.
With many legacy solutions, it can take months to get something working. We were able to get a fully functioning SIEM with corporate logs, cloud logs and detections turned on within days.
The built in primitives that let you test your detections as you develop them was 🤯. Very well thought out and out of the box has things I used to have to spend weeks building with prior solutions.
What do you dislike about the product?
The product doesn't have decades of development and there are a few features that legacy solutions have built in like dashboarding built in but it can integrate with purpose built tools like tableau, mode, and even python notebooks.
What problems is the product solving and how is that benefiting you?
A cloud scalable SIEM that's cost effective with a rich detections language. Yes, Panther does a good job doing that.
Recommendations to others considering the product:
The power of the scripting detection language, test driven development and detection as code will save you a ton of headaches doing it early. Panther does this out of the box.
Great team & modern vision
What do you like best about the product?
Alignment of eng and alert mgt practices
What do you dislike about the product?
Limited pre-existing ecosystem (vendors, alert packs)
What problems is the product solving and how is that benefiting you?
ProdSec & CorpSec monitoring; pervasive data in prod AWS
Good
What do you like best about the product?
Panther team and their support always help
What do you dislike about the product?
Sill not easy to search for an IoC with the license that we currently have
What problems is the product solving and how is that benefiting you?
Log analysis
Sweet spot between ease of use and technical capabilities.
What do you like best about the product?
The team at Panther are some of the best people I have had the pleasure of interacting with. They have created a great product that mixes technical capability with ease of use. I have used other log monitoring tools that require you to learn complex, proprietary languages, are too difficult to make any use out of them, or are just too simplistic to do anything outside of the box. We were able to get set up and running with Pather quickly, taking advantage of their built-in rules, and their method for creating custom rules will take us into the future. And finally, their support is excellent and someone is always available to answer questions or help out in any way that is needed.
What do you dislike about the product?
There honestly hasn't been anything I have come across that I dislike.
What problems is the product solving and how is that benefiting you?
We use Panther to monitor our Cloud applications for security issues that might arise. Panther can monitor logs from many of our applications, including logs from custom services we have created.
Great for cloud logging, especially AWS
What do you like best about the product?
Panther was a refreshing change for our team. We got out of spending time managing servers and infrastructure. We also avoided a lot of costs by moving away from an expensive Splunk license. Our favorite capabilities were: 1. streaming of cloud logs into Snowflake 2. Built on snowflake, so was super fast and reliable. 3 serverless - so easy! 4. easy detections as code in realtime using python.
What do you dislike about the product?
Product was great at speed and power, but lacked in some usability. This was only an issue during onboarding. Their team supported us and walked us through some of the less intuitive areas, now we love it.
What problems is the product solving and how is that benefiting you?
Lower costs for licenses and infrastructure, much faster performance on queries, now have real-time alerting and detection. Lightening fast streaming of all of our cloud logs.
A modern SIEM for the ever growing log and event sources that leverages detections as code
What do you like best about the product?
Panther's approach to detections as code allows our team to implement the same SDLC processes to our detections as the rest of our tooling and in the same language, Python. We build flexible and resilient detections that are thoroughly tested and produce less noisy alerts. Deployments follow our change control processes reducing deployments times and ensuring all detections are peer-reviewed. The Panther team is responsive to requests for assistance, product improvements, and releases new features on a rapid basis.
What do you dislike about the product?
There isn't anything we currently dislike about the product. Forethought must be put into the management of detection rules and the process for merging upstream changes to prevent it from becoming time consuming or difficult.
What problems is the product solving and how is that benefiting you?
We are building fully auditable security detection and monitoring processes, reducing time to detect security events, and improving efficiency in investigations. The ability to make detections as code, use pipelines for testing and continuous deployment. A side effect of the detection as code philosophy is that it is easier to onboard security engineers with less traditional backgrounds, especially software engineering backgrounds.
Recommendations to others considering the product:
Review the set of natively supported systems and your ability to implement log shippers for anything not on the list.
Panther is a world-class solution to complex information security problems
What do you like best about the product?
Onboarding is incredibly simple, detections as code allow for nearly infinite power and possibility, and being able to query all my disparate data from a single location.
Panther is simple and intuitive to use yet still incredibly powerful and flexible.
Panther is simple and intuitive to use yet still incredibly powerful and flexible.
What do you dislike about the product?
I've had a few, but they've mostly been addressed via continued feature improvement. Nothing immediately comes to mind based on my current use cases.
What problems is the product solving and how is that benefiting you?
Problems:
Managing large volumes of log data across a variety of platforms and enormous cloud sprawl.
Threat hunting and detection
Cloud security misconfiguration detection and remediation
Benefits:
Force amplification for a small team
Data visibility
Flexible response mechanisms
Managing large volumes of log data across a variety of platforms and enormous cloud sprawl.
Threat hunting and detection
Cloud security misconfiguration detection and remediation
Benefits:
Force amplification for a small team
Data visibility
Flexible response mechanisms
A non-traditional SIEM that boosts detection as code
What do you like best about the product?
The possibility to write detections as code with Python
What do you dislike about the product?
We have not found anything that we dislike, that is why we have onboarded them as a vendor
What problems is the product solving and how is that benefiting you?
Building detections as code reliably and in a timely fashion and having a detection pipeline to continuously test and deploy them.
Recommendations to others considering the product:
Love the product, it just works and the team behind is always willing to listen and adapt the new features to meet our requirements.
showing 11 - 19