AWS Security Hub vs. Freshservice

AWS Security Hub is mainly for protecting your software, video games, web application, etc... from external digital threats. This is a must for all software out there that can afford it. This also require a decent amount of resources to mitigate problems so that the monitoring page isn't overloaded. So overall, a large amount of budget and manpower is required to maintain this product.

Incentivized

Freshservice is a great all round product with many features. Asset management, Reporting, ticketing, automatization. It was much easier for us using the Freshservice app to scan barcodes for our new devices to get them in the asset management tool, automating certain tasks such as service requests for new devices automatically making a ticket and assigning assets to certain people and getting reports from this afterwards. For a medium to large size company this is great value. For a smaller business there are smaller bundles they provide which are much more affordable in case you do not need all of the features they provide. In summary, lots of features for a snappy, responsive piece of software.

Incentivized

• Brings together the security related AWS tools in one dashboard
• Allows to pick and chose which AWS security tools to use
• Clean UI

Incentivized

• Asset Management Module: The features I like most in this module are the discovery agent software, which allows us to collect device information without manual intervention, and the simplicity and robustness of the module itself.
• Service Catalog: This feature allows us to create forms tailored to specific service requests based on group requirements. The ability to customize forms greatly helps both us and our end-users provide the necessary information to fulfill their requests.
• Workflow Automator and Business Rules: These two allow us to have some automation in place, eliminating some of the manual steps and decreasing the number of human errors that may happen due to manual changes.

Incentivized

• Not easy to read past data, especially once it moves into Glacier deep storage
• performance is somewhat sluggish ... other systems are much faster to analyze data
• Doesn't always provide a remediation solution or suggested fix like other 3rd party tools like Qualys.
• It's hard to get the initial configuration and enrollment completed as there's a lot of manual intervention for every configured rule that needs to be enabled
• alerts are often times delayed

Incentivized

• Workflow management is hard to troubleshoot
• Some default fields can't be changed
• FAQ has no history
• Work flow management can't be managed via API or a command line
• Service Requests and contracts have no possibilities to choose how pricing will be calculated, like per month, per user, per year, per lifetime...
• Automatic backup of assets and FAQ is not possible

Incentivized

We are pretty invested in Freshservice right now and have integrated it pretty heavily into our environment, so it would be hard to move away from it. For the most part, we are happy with Freshservice and the ease of use it gives us in managing tickets through the system. The only complaint we've had is customer service.

Incentivized

AWS always good with usability and same here for AWS Security Hub. A lot of good documentation is available to read and configure your own. We also started with looking at the videos and documentation to configure automation for our compliance checks. And to configure there are very less steps to be followed which is a very good thing for faster configuration.

Incentivized

Easy to navigate and use GUI. We have many infrastructure team members from various departments using Freshservice and their on-boarding and training was very straightforward and we have not received much, if any negative feedback from non-technology users in regards to overall usability, interface or functionality.

Downtime is minimal (it does happen but not often)

Incentivized

Most reports are quick, however, it can take some time for emailed exports to come via email. It would be helpful to have the exports live in the system rather than having to wait on emails.

Incentivized

Support from OEM is decent but needs improvement. Sometimes OEM also needs to understand the criticality of the customer and help as an Ad-hoc, which is somewhat lacking at Feshservice. Although the normal support team is well-equipped and helps according to the matrix, if something critical for the partner or customer requires immediate attention, it still goes through the L1-L2-L3 levels, which wastes a lot of time.

Incentivized

Training was enough to use the base website

Incentivized

Their documentation is pretty good, but only available in English. This makes it difficult for some of our users to understand. There are also some basic video courses available.

Incentivized

Creating the correct groups for the stakeholders and enabling the right notifications are one of the most important aspect of the implementation. Creating Change templates will also help in the long run and it's a good practice to create one, if applicable.

AWS stacks up very similarly to Splunk but being that it's an AWS tool it is better able to natively monitor our AWS footprint, unlike splunk which requires an appliance and / or forwarding agent for it to work properly. The same can be said about some other tools like Dynatrace. Dynatrace has a much more pleasant user interface that the senior management seems to like more, but AWS Security Hub has better options, a more straightforward rules engine and is less expensive than both Splunk and Dynatrace

Incentivized

Freshservice is ahead in some areas, behind in others. For example, workspaces have been part of other products for many years. Freshworks just introduced it in 2023. Integration with productivity tools is better than past products we have used. Apps continue to be added as well. We selected Freshservice as it was the best mix of functionality and cost. We don't need solutions as robust as ServiceNow, for example, but found that Freshservice had some comparable advanced features.

Incentivized

The software is very scalable from a small to mid sized team. The features have seemed to scale exceptionally well.

Incentivized

• The automated compliance test helped us a lot to get PCIDSS certified so it was a very good return for our investments.
• Some third party tools we were using were not available for AWS Security Hub automated testing.
• Easy to configure for faster security automations but if we need detailed reports we should add more tools.

Incentivized

• Alleviate our support team by providing knowledge directly to the end users.
• Better response times from our IT support team, thanks to automation and dashboard use.
• Better tracking of our assets by assigning them to users so we know which device was handed out to who. During off-boarding, we know which devices to ask back.

Incentivized