84 StrongDM Reviews
Overall Review Sentiment for StrongDM
Log in to view review sentiment.
The product is great, we want to take out our VPN and go to a ZeroTrust strategy and StrongDM help us with this topic. Also, the support while deploying the solution and in all the later steps was great and the follow-up meetings with us were helpful to solver the remaining issues. Review collected by and hosted on G2.com.
In general, everything was OK. maybe some other more advanced features in the platform, or some changes in the UI to manage roles and users easily. But it's a tool that provides what you want so... Review collected by and hosted on G2.com.
With SSO and SCIM configured, using SDM is now seamless. It didn't take long for the tool to insert itself into our workflows. As well the Terraform provisioner has been a nice touch. It is helpful to manage some of the static portions of the StrongDM setup in Terraform blocks. Not every company/tool provides a provisioner. Review collected by and hosted on G2.com.
strongDM not having a public roadmap and refusing to publish one when asked was a bit of a downside. Their case managers are forthcoming with details, but it is on the implementing team to communicate upcoming strongDM features to the rest of their companies without a public roadmap to refer to. Review collected by and hosted on G2.com.
StrongDM has minimal overhead to run. Setting up in k8s is a breeze, and has a boilerplate template in the documentation with minimal configuration needed.
We honestly didn't need to compare to the competion because how quick it was to install and configure. Review collected by and hosted on G2.com.
Not much. There are a lot of items you can configure in their UI, which can be confusing at first. StrongDM has excellent documentation and has been making some improvements here. Review collected by and hosted on G2.com.
Having StrongDM makes access control and audits a breeze. I get instant visibility into who is accessing my system and what they are doing. I can quickly grant and revoke access to different sources and it is all controlled in one interface. Review collected by and hosted on G2.com.
We host StrongDM ourselves and we hold onto logs ourselves as well. It's a little cumbersome to parse through those logs afterward. Certain logs like DB queries are better and we wrote a script to understand what is happening but the server actions recording logs are cryptic. Review collected by and hosted on G2.com.
By far the most helpful for us is the database and access management features, this is StrongDM's bread and butter. We currently use StrongDM for database access management, kubernetes access management, and SSH monitoring. We are currently exploring the other features offered like Secret Stores. Review collected by and hosted on G2.com.
The only thing that I really disliked at first was the user management, but StrongDM listened to their users and made huge updates over the past year in this area and it's now a breeze. Another feature would be a way to search through activity logging via the admin ui, this is easily done via the cli and by piping your logs to stdout but an in admin ui log search would be very useful. Review collected by and hosted on G2.com.
Onboarding new engineers with databases takes 5 minutes. Update and offboarding is instant. Also audit logs of all commands executed! Review collected by and hosted on G2.com.
There's minor issues here and there but overall no major dislikes. Review collected by and hosted on G2.com.
What do you like best?
Where to begin... ease of onboarding/offboarding users. Audit of any shenanigans that those users try to execute. The set-and-forget process of temporary elevation of permissions/resources. Quick support when encountering any issues (hear this, some wait-three-days-for-reply companies that shall remain unnamed). And much more! Review collected by and hosted on G2.com.
With "tighter integrations with Okta and Azure AD," the company is still working out all the kinks to integrate with Google suite groups. I understand that that is not an easy task, and the integrations will soon come out. Review collected by and hosted on G2.com.
* The tool is easy to configure - both UI and IAC are well-designed
* End users can easily see what they have access to, and there's good documentation on how to use it.
* Fantastic support. Very responsive and helpful. Review collected by and hosted on G2.com.
Some of the integrations (databases, SSH, K8s) can unsurprisingly work a bit differently from one another and require custom scripting to work with developer tooling. Review collected by and hosted on G2.com.
From the Admin side, it's intuitive and expansive. It's so nice to have a single pane of glass to manage different access to resources; but a killer feature is granting temporary access. As teams change, people go on-call, or various other changes happen, roles can be dynamically changed and updated- all autonomously after rules are established. This minimizes overhead, greases the wheels and gets developers, auditors, directors; whoever the right access they need every time without having to step in.
In addition, I appreciate that SDM has expanded so much since we began using them a few years back. It seems like they are always looking for new services to implement and work with; making SDM an absolute integral part of our infrastructure. I appreciate their human-centric design as well; no complex (specific) jargon; clear labels, and excellent documentation and Github repo for nontraditional deployments.
Finally; I appreciate the elegance of this solution. It's a simple solution to a complex problem. The Gateways/Relays are straightforward in how they do what they do. Understanding the internals of something is big; it's not necessarily a black box-- so troubleshooting and extension becomes easy and intuitive. From a client perspective, it's incredibly easy to understand and jump between different resources with minimal training. Always fantastic when a userbase is easy to pick up a new tool and use it without question. Minimizes our overhead, increases security, and simply works. This is the rare exception where increasing security at the end-user level actually improves the user experience. Review collected by and hosted on G2.com.
Audit log retrieval / search could be a little bit more intuitive. A solution was outlined to us (created by SDM) to output over to our log aggregator, which helps immensely-- but it could be more straightforward. Review collected by and hosted on G2.com.
