We have implemented ActiveWolf due to its more hands-off approach, suitable for our small IT team without dedicated security specialists.
Arctic Wolf Managed Detection and Response (MDR)
Arctic WolfExternal reviews
External reviews are not included in the AWS star rating for the product.
Hands-off approach works well with monthly security assistance for network
What is our primary use case?
What is most valuable?
The solution works well for our team as it offers a hands-off approach, which we need. The pricing is okay and comparable to other solutions. We value the hands-off approach as we don't have our own security team. We have monthly meetings with them, where they help us secure parts of our network, which is valuable to us.
What needs improvement?
The only frustrating aspect is the lack of support for Windows on ARM devices. We cannot fully secure these devices until they release an updated version of their agent software.
For how long have I used the solution?
I've used the solution for just over a year.
What do I think about the stability of the solution?
There is not much downtime, however, they are sometimes a bit slow in responding with more information when an issue is flagged.
How are customer service and support?
They are quite responsive overall. We have monthly meetings where they help us with network security. However, their response can be slow when we ask for more information.
How would you rate customer service and support?
Positive
How was the initial setup?
It took us about three to four weeks to bring it live as we had to ship the sensors to different sites. It probably took a month to be fully up to speed, but that was fine because we needed to onboard it anyway.
What's my experience with pricing, setup cost, and licensing?
The pricing is okay and comparable to other solutions, with competitive pricing obtained for most options. We value the ease of use and hands-off approach.
Which other solutions did I evaluate?
We looked at the Microsoft service and another solution, however, I can't remember the name of the latter.
What other advice do I have?
I rate the overall solution nine out of ten.
Cyber security
Arctic Wolf MDR
Thank you Arctic Wolf
Real-time threat detection has improved with comprehensive asset scanning
What is our primary use case?
One of the things it excels at is flagging vulnerabilities. It scans assets, evaluates the vulnerabilities, and assesses risk scores, focusing on high-risk areas.
It helps to maintain compliance within thirty, sixty, and ninety days as well as, informs us when an asset is out of compliance and the number of days is has been out of compliance. We have agents installed that constantly report back to us from all our data centers. For instance, Log4j and the IBM vulnerability are some issues we've were able to quickly mitigate.
What is most valuable?
Their asset scanning features are a game changer. The entire solution, especially their advanced threat protection recently released, are very effective in helping to mitigate corporate risks. The concierge team is excellent. The Arctic Wolf agents, which are constantly performing scans help to produce almost real-time reporting.
Threat detection is remarkable. Security is everyone's responsibility and Arctic Wolf does an excellent job ensuring the company is trained, sending out timely videos about industry happenings. Their educational materials are invaluable. The content they release is timely, and employee engagement is notably high.
What needs improvement?
The threat intelligence feature is expected to be a significant advantage. However, a section for software inventory and real-time comparison with current CVEs would be beneficial.
One can review an inventory of assets being scanned, including a software inventory along with CVE updates based on a company's software subscriptions, would be a game changer.
For how long have I used the solution?
We have been using Arctic Wolf for a couple of years now.
How are customer service and support?
I would give customer service a ten out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup was somewhat complex, once you set up your scanners and deploy the agents, there is mostly like additional configuration required. Labeling assets and identifying whether they are in production, test, or development is necessary, along with manual inputs. During onboarding, asset labeling tagging is crucial to avoid unknowns. We collaborated extensively with Arctic Wolf on configurations, many of which are integrated into recent product releases and updates to their dashboard. In the beginning we had ongoing meetings with the concierge team until we moved to a more scheduled cadence.
What was our ROI?
The services provided by Arctic Wolf are comprehensive. Their training materials and videos benefit the organization as a whole. While similar training is available from other companies, Arctic Wolf's offerings are timely and effective. Employee engagement is high, with a 96% viewing and participation rate for their training materials. The company has achieved strong cultural buy-in.
Which other solutions did I evaluate?
We have discussed their use of AI in learning modules; however, it is not yet heavily integrated into their decision-making processes. While AI may exist in the product to some extent, it does not perform the role of a security engineer.
What other advice do I have?
I highly recommend Arctic Wolf as they excel in ensuring the company is well-trained and updated on industry developments.
Overall, I rate them nine out of ten. Their security threat intelligence and timely security bulletins are excellent. They effectively promote a security-conscious culture, raising the bar for security and threat intelligence.
A truly trusted cybersecurity partner.
AWN comprehensive security services are 2nd to none
· Dedicated Concierge team
· Portal and services improvements and added offerings
· Cybersecurity Summit – events and guest speakers are value add
· Customer Roundtables – looking forward to more, when is the next one?
· Resources/Updates/Alerts – daily/weekly reports/emails are helpful and informative
· Security Incidents assistance - timelin, detailed and comprehensive
1) Potential Data Breaches and Unauthorized Access
2) Malware and Ransomware Attacks
3) Phishing and Social Engineering Attacks
4) Regulatory Compliance
5) Business Continuity and Disaster Recovery