Imperva Attack Analytics, (formerly ThreatRadar), is a threat intelligence service relying on research from Imperva's Application Defense Center (ADC), integratable into Imperva's WAF solutions and able to be fed into enterprise security data.
N/A
Splunk SOAR
Score 9.0 out of 10
N/A
Splunk now offers a security orchestration, automation, and response (SOAR) platform via its acquisition of Phantom. Splunk Security Orchestration and Automation (Splunk SOAR) provides playbook automation and is available as a standalone solution.
I think Imperva Analytics is a super complete security tool, for now it would be great if they could add a heat map of the attacks that are coming to me versus the attacks that are being executed in real time worldwide, to know if we are being victims of a massive attack against several countries. In the same way, an improvement that they recently implemented seems good to me to bring to the comment is that they assigned us an engineer who would provide us with personalized attention from Imperva.
Our company has very complex and dynamic security operations because of the large number of security tools and systems that we need to manage and coordinate. Moreover, it helps us to meet many regulatory and compliance requirements because it helps us to automate and document our security operations. We also use it to streamline our security operations and improve our response to potential threats.
A lack of instruction It can be difficult to contact the support staff. Limited experience from current users.
It takes some effort to set up and learn new technology at first. More assistance is required from the support staff. The product's price needs to go down.
As we already have a lot of clients being catered with Splunk SOAR and because Splunk SOAR is robust and efficient, we are already using it, and we have understood the product to a certain extent, I feel we are personally more enticed to use and scale it to a lot of business.
Building playbooks through the visual editor is fine for basic tasks, but once you start chaining complex logic or integrating 3rd party APIs you hit a wall that requires deep scripting knowledge.
It has APIs that are useful for integration with third party solutions as well as for absorbing large volumes of data from our servers, networks and apps. Splunk SOAR offers a variety of playbooks that we use in automating workflows for migrating data and for analyzing the data to ensure its security.
We chose Imperva Attack Analytics for its ability to monitor and audit database activities and its ability to scale and meet demands of the distributed environment. The solution is simple, straightforward and transparent for colleagues, and provides real-time event monitoring, audit analysis and customisable reports.
If you use Splunk SIEM, you might wanna use Splunk soar, too. one vendor for SIEM and SOAR, and you do not need to think about integration, etc. Easy to use if we compare to other SOARs, chat and war rooms are great, and almost every action that we need is already created in Splunk SOAR.
Imperva Attack Analytics has detected multiple vulnerabilities for zero-day attacks before they were exploited. This allowed us to remediate the vulnerabilities without any downtime or financial impact.
Imperva Attack Analytics has allowed our on-premise infrastructure the same level of security provided as our cloud infrastructure.
The playbooks are valuable. They are the core component. Being able to implement and build a code process to work through and scale out what we want to do is valuable
Before its use, analyzing each email would take at least 15 to 20 minutes, with some complex cases taking up to 30 minutes...With the automation provided by Splunk Phantom, we could significantly reduce the amount of time and human effort required to complete this task
