Fortra&#39;s Alert Logic MDR vs Vectra AI comparison

Read 44 Vectra AI reviews

5,797 Views
2,912 Comparison Views

97% willing to recommend

Fortra's Alert Logic MDR

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Fortra's Alert Logic MDR and Vectra AI based on real PeerSpot user reviews.

Find out what your peers are saying about Tenable, Qualys, Wiz and others in Vulnerability Management.

To learn more, read our detailed Vulnerability Management Report (Updated: December 2024).

Download the complete report

Vulnerability Management

December 2024

Helped 831,265 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortra's Alert Logic MDR

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Vulnerability Management (32nd), SOC as a Service (4th), Managed Detection and Response (MDR) (19th)

Vectra AI

Average Rating

8.6

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Intrusion Detection and Prevention Software (IDPS) (2nd), Network Detection and Response (NDR) (2nd), Extended Detection and Response (XDR) (9th), Identity Threat Detection and Response (ITDR) (5th), AI-Powered Cybersecurity Platforms (5th)

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Fortra's Alert Logic MDR is designed for Vulnerability Management and holds a mindshare of 0.3%, up 0.1% compared to last year.
Vectra AI, on the other hand, focuses on Intrusion Detection and Prevention Software (IDPS), holds 11.9% mindshare, up 9.9% since last year.

Vulnerability Management

Intrusion Detection and Prevention Software (IDPS)

Featured Reviews

reviewer1525833

Site Reliability Engineer at a retailer with 10,001+ employees

Great reporting and session logic with an easy initial setup

The initial setup isn't too difficult. It's pretty straightforward. An organization shouldn't have too much trouble with the setup. The deployment is very fast. It doesn't take too much time at all. It's likely less than five minutes. Honestly, it's almost instantaneous. There is no mapping. Once you're done with the customization you can use it. It's not time-consuming. The customization part is based on whatever keywords and attributes you are adding, and that's less than a minute of time to handle. There is no time consumed. You just need to add to a filter. You don't really need to worry about having too much maintenance. It's not required really. Maybe once the log is full, you may require a maintenance checkup of six months on. We have a server team that manages that aspect.

Read full review

Mohammad Alkurdi

Owner at Fortibits

Innovative detection features enhance monitoring

The advantages of the integration are not entirely out-of-the-box. You have to do it manually. When I'm doing tier response, an out-of-the-box solution is not available. You need to have a Linux server, and from the Linux server, you must perform AI tasks, and there is a lot to be handled in the back end. This is a major consideration about them. The recall feature, if it can be placed in some areas instead of the cloud, and charged for, would be better. Recall the storage where you watch all the traffic, and you can recall it and try to analyze it in the back end. It’s cloud-based. If they offer it on-prem, it would be better. I think they have a solution, but I have never tested it, to be honest with you.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The quicker implementation of changes to our infrastructure from Alert Logic tell us if there are any problems."

"The installation and configuration were slick."

"Everything is in one dashboard; I'm notified when there's an incident and advised on what steps to take."

"The most valuable aspect of Alert Logic is its technology platform. They have SOCs in the US and Europe, giving them global visibility of the threat landscape. They detect and respond to threats in minutes. Their biggest value is human expertise. You're being attacked by a human, and you cannot respond to it unless you have a human on the other side. They have the human and technological resources to respond."

"While I still have on-premises appliances, I can remotely monitor everything from the cloud, and Alert Logic's ease-of-access features have helped me streamline my workflow and reduce implementation time."

"It is a very stable product."

"It improves our security. Before, we didn't have anything scanning our containers. We had software scanning all the physical servers, but we had nothing to scan our containers. With Alert Logic, we can do that."

"The solution was consistently available, and I cannot recall any instances where it was down."

More Fortra's Alert Logic MDR pros

"One of the core features is that Vectra AI triages threats and correlates them with compromised host devices. From a visibility perspective, we can better track the threat across the network. Instead of us potentially finding one device that has been impacted without Vectra AI, it will give us the visibility of everywhere that threat went. Therefore, visibility has increased for us."

"Vectra is very compatible with various cloud providers, such as Amazon and Azure AD. This is helpful as customers often migrate their network infrastructure to the cloud."

"The initial setup was pretty straightforward."

"It has helped us to organize our security. We get a better overview on what is happening on the network, which has helped us get quicker responses to users. If we see malicious activity, then we can quickly take action on it. Previously, we weren't getting an overview as fast as we are now, so we can now provide a quicker response."

"It gives you access, with Recall, to instant visibility into your network through something like a SIEM solution. For us, being able to correlate all of this network data without having to manage it, has provided immediate value. It gives us the ability to really work on the stuff where I and my team have expertise, instead of having to manage a SIEM solution..."

"The most useful feature is the anomaly detection because it's not signature-based. It picks up the initial part of any attack, like the recon and those aspects of the kill chain, very well."

"Most of their use cases, including deployment, are managed by the tool itself, requiring less manual input from our team."

"One of the things that we didn't expect to happen was that our network team also jumped on it faster than we thought. In most cases, if it's a security tool that's working on the network part, they can also use it to find out certain flaws that have been in the system. Certain flaws, related to some legacy stuff, were already there for quite a few years, which they couldn't explain at first, but we could explain them based on the timing of certain things."

More Vectra AI pros

Cons

"I would like to see it do initial scans and start capturing data, which it will truly analyze, not just be a reporting system saying, "Here is an email. Here is an email. Here is an email.""

"Its menu is not very intuitive. I would like to see the user menu expanded a bit. The user menu is very layered, and because of the layers, you have to go down a path that is not very intuitive."

"This product needs to mature more. While it is a good product, there are some areas where it needs work."

"The setup process was complex."

"The product needs to mature. We don't want to be bombarded with unnecessary issues and have the real ones slip through."

"I would like more data on the alert payload. It would be good to have the ability to customize the alert payload to add whatever data that we want on there. Right now, it is a bit limited."

"We'd like to have triggered alerts sent to us so we see errors quicker."

"The documentation, especially with the initial setup, needs improvement."

More Fortra's Alert Logic MDR cons

"In education as a sector, we are looking at AI a lot in terms of how it can be used as part of the teaching and learning side of things. It would be great to have Vectra AI look at a better way to enhance the security posture related to the AI tools in our portfolio."

"Integration with other security components needs improvement. It should have true integration as opposed to just being a separate pane of glass."

"ExtraHop has better features that seem more advantageous when compared to Vectra."

"The reporting from Cognito Detect is very limited and doesn't give you too many options. If I want to prepare a customized report on a particular host, even though I see the data, I have to manually prepare the report. The reporting features that are built into the tool are not very helpful."

"You are always limited with visibility on the host due to the fact that it is a network based tool. It gives you visibility on certain elements of the attack path, but it doesn't necessarily give you visibility on everything. Specifically, the initial intrusion side of things that doesn't necessarily see the initial compromise. It doesn't see stuff that goes on the host, such as where scripts are run. Even though you are seeing traffic, it doesn't necessarily see the malicious payload. Therefore, it's very difficult for it to identify these type of host-driven complex attacks."

"The solution has not reduced the security analyst workload in our organization because we still need to SIEM. Unfortunately, while Vectra, for us, is a brilliant tool for network investigations, giving wonderful visibility, it doesn't go the whole way to replace our SIEM that is needed for compliance. So, I still have the same amount of alerting and logging that I did before. It gives us more defined ability to see incidents, but it doesn't give us enough information to satisfy a PCI or 27001 audit."

"If you hit a certain number of rules, triage filters, or groups, the UX responds more slowly. However, we have a complex network and a lot of rules. So, our setup might not be a typical implementation example. We even had UX engineers onsite, and they looked at issues, improvements, and user feedback. Since then, it has gotten a lot better, they even built in features that we specifically requested for our company."

"We have a lot of system solutions and integrations with system solutions. Vectra is a type of black box. It implements AI-informed detection mechanisms, but we cannot create system detections. I understand that the product is designed this way, but it would be great if we could create our own detections as well."

More Vectra AI cons

Pricing and Cost Advice

"Price of the solution was very reasonable considering the size of our organization at the time, and so it worked out perfectly."

"Our ROI would probably be zero. We don't even use it. It sits in there. We get emails and just delete them. Around the world, we don't even use it."

"Alert Logic has better competitive pricing than some of its competitors."

"Its pricing is very reasonable considering what you get for what you pay. There is quite a good value there. Its licensing is also very logical. They've got the licensing price points at a reasonable level. It is on a monthly license but a yearly contract. There are no additional costs to the standard licensing fees."

"Almost any product that is on the AWS Marketplace is super easy to subscribe to."

"We have a desire to increase our use. However, it all comes down to budget. It's a very expensive tool that is very difficult to prove business support for. We would like to have two separate networks. We have our corporate network and PCI network, which is segregated due to payment processing. We don't have it for deployed in the PCI network. It would be good to have it fully deployed there to provide us with additional monitoring and control, but the cost associated with their licensing model makes it prohibitively expensive to deploy."

"The solution is low-cost and affordable."

"The upfront pricing model that we have would have been more beneficial if it had been a recurring license fee, but that wasn't a massive issue for us. It's fairly priced."

"From a pricing perspective, they are very commercially competitive. From a licensing perspective, just be conscious that some of their future cloud solutions come with additional subscriptions. Also, if you're outside of the US, you will get charged freight for the device back to your country."

"Vectra AI is not a cheap solution."

"The pricing is very good. It's less expensive than many of the tools out there."

"The license is based on the concurrent IP addresses that it's investigating. We have 9,800 to 10,000 IP addresses."

"We are running at about 90,000 pounds per year. The solution is a licensed cost. The hardware that they gave us was pretty much next to nothing. It is the license that we're paying for."

More Vectra AI pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

831,265 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

13%

Manufacturing Company

Healthcare Company

Computer Software Company

15%

Financial Services Firm

12%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Alert Logic?

The most valuable aspect of Alert Logic is its technology platform. They have SOCs in the US and Europe, giving them global visibility of the threat landscape. They detect and respond to threats in...

What is your experience regarding pricing and costs for Alert Logic?

Alert Logic's license is one of the most competitive. They deliver a high-quality service for a competitive price.

What needs improvement with Alert Logic?

Alert Logic should also develop an EDR that is natively integrated into their solution. Currently, a client must buy another EDR solution like SentinelOne, CrowdStrike, or Sophos. I think Alert Log...

What is the biggest difference between Corelight and Vectra AI?

The two platforms take a fundamentally different approach to NDR. Corelight is limited to use cases that require the eventual forwarding of events and parsed data logs to a security team’s SIEM or ...

What do you like most about Vectra AI?

The solution is currently used as a central threat detection and response system.

What is your experience regarding pricing and costs for Vectra AI?

Vectra is cheaper in terms of pricing and features compared to Darktrace.

SentinelOne Vigilance vs Fortra's Alert Logic MDR

Comparisons

Compared 21% of the time

Arctic Wolf Managed Detection and Response vs Fortra's Alert Logic MDR

Compared 19% of the time

Rapid7 InsightIDR vs Fortra's Alert Logic MDR

Compared 17% of the time

CrowdStrike Falcon Complete MDR vs Fortra's Alert Logic MDR

Compared 17% of the time

Huntress Managed EDR vs Fortra's Alert Logic MDR

Compared 8% of the time

More Fortra's Alert Logic MDR Competitors

Darktrace vs Vectra AI

Compared 35% of the time

ExtraHop Reveal(x) vs Vectra AI

Compared 12% of the time

Cisco Secure Network Analytics vs Vectra AI

Compared 6% of the time

Arista NDR vs Vectra AI

Compared 5% of the time

Corelight vs Vectra AI

Compared 5% of the time

More Vectra AI Competitors

Product Reports

Download Fortra's Alert Logic MDR product report

Fortra's Alert Logic MDR

January 2025

Download Vectra AI product report

December 2024

Also Known As

Alert Logic MDR, Alert Logic Managed Detection and ResponseAlert Logic Threat Manager, Alert Logic Cloud Defender, Critical Watch FusionVM

Vectra Networks, Vectra AI NDR

Learn More

Fortra

Overview

Alert Logic specializes in log management, security configuration, SIEM, SaaS monitoring, network protection, and MDR services. It is suitable for sectors such as utilities, financial services, and government.

Alert Logic offers extensive log management and proactive security by centralizing logs, providing detailed notifications, and detecting intrusions. With global threat visibility and SOCs in the US and Europe, it speeds up the threat detection process in seconds. Advanced technologies, like AI and ML, improve its MDR services and differentiate legitimate user behavior from threats.

What are Alert Logic's key features?

Excellent log messages for seamless log management
Immediate log retrieval during production issues
Clear, user-friendly notifications
Proactive and detailed incident notifications
Centralized dashboard for easy monitoring
Good intrusion detection and heuristic threat monitoring
Global threat visibility with fast threat detection
Human expertise backing threat detection and response

What benefits should users expect when evaluating Alert Logic?

Streamlined log management and rapid issue resolution
Centralized monitoring for efficient incident management
Fast global threat detection improves security stance
Human expertise for accurate threat response
Advanced threat differentiation using AI and ML

Alert Logic proves beneficial for various industries, with e-commerce applications utilizing it for robust log management and security measures. Utility sector companies leverage its network protection and threat detection capabilities, while financial services organizations appreciate its MDR services. Government agencies rely on its comprehensive infrastructure monitoring and SOC expertise for enhanced security.

Vectra AI is used for detecting network anomalies and potential malicious activities, providing visibility into network traffic and enhancing threat detection across environments.

Organizations deploy Vectra AI mainly on-premises with additional cloud components. It helps with compliance, incident response, security monitoring, detecting insider threats, and correlating network events. Vectra AI captures and enriches network metadata, provides detailed dashboards, reduces false positives, and supports cross-environment behavioral analysis to enhance threat detection and prioritization. While valued for its high accuracy and alert aggregation, it has room for improvement in UI/UX, packet management, and integration with SIEMs and other tools. It is noted for expensive pricing and limited proactive threat response features.

What are Vectra AI's most valuable features?

High accuracy in identifying threat locations
Aggregation of alerts into single incidents
24/7 threat detection
Visibility into the entire attack lifecycle
Risk score aggregation
Effective triaging of alerts
Integration with other tools

What benefits or ROI should users look for?

Enhanced threat detection and prioritization
Comprehensive network visibility
Reduction in false positives
Better incident response capabilities
Improved compliance monitoring

In specific industries, Vectra AI is deployed to monitor complex networks and alleviate challenges in threat detection. It is particularly effective in sectors requiring stringent compliance and security measures, offering insights and capabilities crucial for protecting sensitive data and maintaining operational integrity.

Sample Customers

Information Not Available

Tribune Media Group, Barry University, Aruba Networks, Good Technology, Riverbed, Santa Clara University, Securities Exchange, Tri-State Generation and Transmission Association