Cisco Vulnerability Management vs. Recorded Future Intelligence Cloud

For user end devices this product has worked great for us. We have been able to find vulnerabilities/risks with certain software in bulk on devices and implement fixes for them very quickly. CVM has also provided us visabity on all our devices that we never had before and we can close gaps security wise a lot faster knowing now where problems are at

Incentivized

Recorded Future is mainly beneficial to the SOC. As part of the Monitoring team, Recorded Future makes the investigation of the alarms a lot easier for me. It can show the reputation of the IP/domain or even hashes which helps me redirect my focus to potentially malicious network activities.

Incentivized

• Vulnerability tracking
• Risk Meter reporting to pinpoint specific systems or vulnerabilities
• Provides vulnerability scores to see what is high / medium / low urgency

Incentivized

• Searching across multiple sources at the same time
• Indexing information in real time
• Dashboards, statistics and heatmaps about a certain topic

Incentivized

• Faster system scan times in background
• more accurate vulnerability remediation links

Incentivized

• For the Browser extension, since the main purpose is to present information with regards to the IP, I think it's best to give us an idea of where the IP originated/some additional information about the organization it belongs to.

Incentivized

CVM provides a very easy to understand and use interfaces. Dashboards and reporting are compiled nicely when risk meters are created. After initial setup of software cisco onboarding teams do an amazing job going over all areas of this software to provide best overall usability of the product. Against other tools setup and usability is at a higher standard

Incentivized

I've had an issue with their browser-plugin which didn't want to authenticate correctly. RF's support could arrange for a session with me and identify and solve the issue. I was very pleased how serious they took my problems and also how knowledgeable they are.

If I have more general questions they quickly reply and most likely also have a solution at hand.

Incentivized

We run a flavor of multiple products and CVM enhances/complements those tools by pinpointing where the vulnerabilities are at on our network. Intune and Automox being products CVM works well with when its time to patch affected systems. Tenable we used prior to CVM and its product was too complex and clunky and always had issues with asset duplication. CVM simplified vulnerability scanning and made it a lot easier to manage compared to Tenable

Incentivized

It is the most complete solution of these three, as the others are focused in specific areas and having really detailed analysis about threat actors, APT groups, etc. Recorded Future is not having this level of knowledge in really specific areas but doing a really good work covering thousands of sources and the most relevant forums.

Incentivized

• We have lowered our companies risk score from 850 to 660 in less than 6 months.
• We have mitigated over 120,000 Vulnerabilities on our network since using CVM.
• We have been able to streamline/prioritize patch management based off scans CVM provides from our assets.

Incentivized

• We've been able to identify leaked credentials and close those accounts off.
• We've also been able to identify malware being distributed or spam being sent out by customers using our infrastructure. Again we could shut off those accounts.
• Their domain-monitoring allows us to identify typo-squats and issue domain-takedowns for those (or at least add them to our monitoring / detection)

Incentivized