Fortra's Alert Logic MDR Reviews

Alert Logic is a highly mature managed detection and response MDR service that has been under development for more than 20 years. It's a comprehensive solution with all the essential MDR elements and the latest technologies, such as artificial intelligence and machine learning. I recommend deploying Alert Logic for all kinds of customers in the public and private sectors, including utility companies, financial services, government, etc.

Alert Logic offers total visibility into the client's IT ecosystem. The solution's intrusion detection system inspects 100 percent of the network packets and installs universal agents on all physical and virtual servers for log collection. Alert Logic also aggregates logs of the client's various 3rd Party security tools into a single pane of glass. 

All of the analytics from those data feeds got to a 24/7 SOC with sophisticated resources. Alert Logic has massive threat intelligence resources to provide additional context to the incident response declarations. They do all the heavy lifting for clients who lack the technology and resources to operate their own SOC. 

The client is solely responsible for the incident response component. The macro analytics resides on Alert Logic's cloud. You have the ECM response and business application team on the client side.

Everything works in tandem, which is the only way you can deal with the advanced threats we face today, especially the ransomware families. If you don't respond in minutes, you're in trouble.

The most valuable aspect of Alert Logic is its optimized technology platform. They have SOCs in the US and Europe, giving them global visibility of the threat landscape. They detect and respond to threats in minutes. Their biggest value is human expertise. You're being attacked by a human, and you cannot respond to it unless you have a human on the other side. They have the human and technological resources to respond.

Alert Logic should also develop an EDR that is natively integrated into their solution. Currently, a client must buy another EDR solution like SentinelOne, CrowdStrike, or Sophos. I think Alert Logic is developing this. A built-in email with AI security could also be developed and integrated into their holistic MDR platform.

I have been an Alert Logic reseller for about a year. 

I rate Alert Logic nine out of 10 for stability.

I rate Alert Logic nine out of 10 for scalability.

I rate Alert Logic customer service 10 out of 10.

Positive

The implementation is pretty straightforward. You immediately gain visibility as soon as you install the IDS appliance, deploy the agents on the servers, and start collecting syslogs. However, you need to take some additional time to fine-tune and optimize the platform and all the devices. It takes about four to six weeks to get results and around three months to optimize the platform monitoring service.

Alert Logic offers a very high ROI. 

Alert Logic's license is one of the most competitive. They deliver a high-quality service for a competitive price. 

I evaluated deepwatch. Alert Logic is more mature, with 20-plus years of development. While deepwatch is a very advanced MDR, it is only about five or six years in the CMMI process. Alert Logic also has advantages in online compliance and security reporting. It covers several regulatory mandates, such as PCI, HIPAA, SOC2, etc. with automated compliance features, which is somewhat unique in the industry.  

I rate Alert Logic nine out of 10. 

We use it to be able to review logs and the overall system help and learn on anything that we need to handle.

Our organization's issue is that we implemented it and kicked the tires, but we never put an administrator behind it to own it and do a whole lot for it. There were a couple of select cases that we found and acted on those alerts. However, for the most part, it's just a climbing number of alerts with nobody touching them.

We needed a better plan for implantation. If we put something out there, we have to have people lined up to look at it and admin it, then reap the benefits of everything it's telling us to act on it. If you're not doing this, you have good intentions, but you fell short.

We receive infrastructure security warnings from it. So, we know what is going on and what needs to be addressed, e.g., things that we didn't have somebody looking for. It shows us these automatically, using things like automated scanning.

This product needs to mature more. While it is a good product, there are some areas where it needs work. If this is a cloud service, I shouldn't have to tell them how to develop analytics to tell me this is what is going on. They should be able to do it. Over time, their own system should be able to identify, "This is something that is a continuous thing with a particular user or company." Or, I should be able to click on it being able to "ignore" it, dropping it completely. It should be smarter than what it is, and it is not.

It implemented pretty quickly. 

We have everything you need. It would typically take a lot other solutions weeks to set up. This set up within fifteen minutes, which is pretty slick, and it has a lot of different interfaces.

The installation and configuration were slick. After installing in 20 to 30 minutes, you can start provisioning access, so people can take a look.

I was not involved in the pricing and licensing.

Other solutions that we evaluated were Datadog and LogRhythm, but it is not an apples to apples comparison.

Alert Logic was not my choice. I implemented it, and said, "Here you go guys. Kick the tires."

We only use the AWS version.

The primary use case is security.

The quicker implementation of changes to our infrastructure from Alert Logic tell us if there are any problems.

• Easy to use, nice interface. 
• It is quick set up.

The documentation, especially with the initial setup, needs improvement.

The stability is good. We trust it fully.

Scalability seems good. This was one of the other features that we were interested in. 

We have eight different accounts and are able to implement the solution across them easily.

I go internally into the business for technical support rather than using the supplier for technical support.

It fully integrates with our AWS environment, which is brilliant.

Alert Logic integrates with all of our products, which was one of the reasons that we went for it.

We also evaluated on-premise and open source products. We went with Alert Logic because it was quicker to implement.

Try and get a demo. It is the best one products. As soon as you see it working, you will see it is very good.

We are using the cloud version.