SentinelOne Vigilance vs. Trustwave Managed Detection and Response

Excellent value for a team without dedicated EDR personnel or low staff. [SentinelOne] Vigilance does not integrate as well with internal staff and needs a better way to a round-robin or assign issues/follow up to numerous internal staff. Would benefit from more workflow to look at multiple issues.

Incentivized

Trustwave firewall is a nice way to provide and maintain a secure connection between your Managed NGFW Device(s) and their platform for overall efficient security. The software comes with adequate documentation that outlines clearly your duties and theirs and I constantly remind my team to read through; prevents several conflicts. Trustwave also conducts frequent updates so you're confident while the software handles the most sensitive of data.

Incentivized

• AI/ML based detection engine has not missed a single known threat since installed
• [SentinelOne] Vigilance makes clear notes and does a great job at weeding out false positives
• Easy to use online console works on any connection
• Integration with out Okta SSO MFA and Identity cloud

Incentivized

• It is very reliable in environments without permanent refrigeration.
• The rules that it handles are static, but it has some mechanisms for detecting instruments, which for the current users are very good.
• It maintains VPNs in a stable way and its configuration is similar and compatible with other brands.

Incentivized

• [SentinelOne] Vigilance notes are captured in each event which is near impossible to review with low staff. Better reporting on activities would help demonstrate better the activity ongoing
• Ability to extract notes and incidents to our SIEM would be great
• A customer success manager would be a nice addition

Incentivized

• Trustkeeper portal can be slow
• Trustwave sales and support are lacking
• The endpoint client is a little large in size

Incentivized

There is a learning curve to understand and analyse detections, but that is to be expected for a versatile endpoint detection and response tool.

Incentivized

SentinelOne Vigilance was as good or better than each of the products we also have used in this product range. We chose SentinelOne Vigilance for many of our clients based on the supported integrations with our other toolsets.

Incentivized

After considering several major providers, we realized Trustwave will provide deeper visibility into our data lake which will allow powerful enrichment, investigation, hunting, and strong orchestration for incident response due to its robustness. Moreover, the professional services team at Trustwave delivered a turnkey setup and configuration, as well as continuous fine-tuning, to eliminate any transition-related complications

Incentivized

• Client satisfaction with standard of monitoring and response has increased
• No breach has occurred for any client with this correctly deployed

Incentivized

• It has alleviated time from technicians who do not have to find RCA's for all incidents.
• It actively protects and monitors all traffic and reports in timely fashion.
• Support can be tricky to work with, but incident response makes up for that.

Incentivized