I am the security manager of the company, and we have a system communications department and IT. They manage the platform in order to monitor some PCs and servers to have them updated and patched.
We wanted to save time by implementing Vicarius vRx. Before vRx, we spent a lot of time searching for vulnerabilities that came out and patching them manually. With Active Directory integration and many other things, we now have it all centralized in the vRx Console.
Vicarius vRx consolidates vulnerability discovery, prioritization, and remediation in a single platform. This is very important for us. We are spending less time on these tasks. Previously, we had a team of three people for these tasks. After implementing Vicarius vRx, thanks to the vRx Console, we only have one person.
We have done some automation for vulnerability management. For some devices, we have automation to patch critical and high vulnerabilities in less than an hour of being discovered by Vicarius vRx. Previously, we had three people, whereas we now have only one person handling the work. It has saved about 1,800 hours a year.
After implementing Vicarius vRx, we realized that we were not aware of all the vulnerabilities. We did not know how insecure our systems were, whereas now, we know that our systems are not affected by so many CVEs. This knowledge of how secure we are is a major benefit of Vicarius vRx.
Vicarius vRx assists us in spending less time discovering vulnerabilities and knowing whether we are affected or not.
Patchless Protection is helpful in some cases, such as some critical zero-day vulnerabilities. We do not know if it works very well or not, but we activate Patchless Protection until the official patch is released.
We have one script to roll back the changes of our update. We have some automated tasks to apply patches. In case the patching makes a platform unstable, we have a script to go back to and recover a previous version.
Before Vicarius vRx, we were not aware of some vulnerabilities, so our meantime to remediate them was essentially infinite because we never patched them. Previously, it would take us a week to apply a patch for Microsoft vulnerabilities after they came out, whereas now, we can apply them on the same day as they are published.
The prioritization of the vulnerabilities and patches that we must apply immediately is valuable. The automation of the tasks allows us to spend less time in that area.
The support they provide is very good. They answer quickly in the chat and by email.
I would like to see more network architecture elements with patches. We have the ability to search across the network for all switches, routers, and printers, but some devices might be outdated and have vulnerabilities. Additionally, an agent for mobile phones would allow us to monitor corporate mobile devices.
We have been using Vicarius vRx for three years, more or less.
It is a stable product, and I would rate its stability as eight out of ten.
Vicarius vRx is scalable.
We are a medium-sized organization with 250 people. We have multiple locations because we have a lot of people working at home with corporate laptops and PCs. We have four offices in different cities.
We have some clients with up to a thousand agents.
Their support is very good, and they respond quickly. I would rate them a nine out of ten.
We sometimes use the Vicarius vRx user community to find more information about CVEs that are out. We try to read comments and other inputs to understand what is happening and how we can remediate or patch a vulnerability. We only read; we do not contribute anything because most of the CVEs have a lot of information from administrators or security managers in large companies.
We did not use a similar solution. The systems department had an open-source solution to make scripts for us to run. With these scripts, we could run a command asking for a version of some application. If you know that version is affected by many vulnerabilities, we could download the package with another command and apply the update on those machines. This solution frequently failed and had issues requiring manual intervention.
The initial setup was simple and probably took a few hours.
It is deployed on the cloud. It does not require any maintenance from our side.
The initial implementation had a team of three people involved.
We now have one person working with Vicarius vRx but not full-time. I also sometimes check things, but most of the time, there is only one person.
Vicarius vRx has saved us time, money, and resources over the past three years. It saved 50% of the time for at least one person.
In the past, Vicarius vRx was cheap, but now they have adjusted their pricing policy, resulting in higher renewal costs. We have had some conversations with them regarding a smaller jump in the renewal cost.
I would recommend Vicarius vRx to others. I would advise giving it a try with a proof of concept to ensure it suits your requirements. You can compare it with your existing solution to understand the time and resources that you are going to save. Also, compare budgets, as Vicarius vRx might be cheaper.
I would rate Vicarius vRx an eight out of ten.