CYREBRO Reviews & Product Details

We have been using Cyrebro for approximately 3 months. In that time, we have been alerted to 3 incidents of malicious activity. Our customer success rep has been fantastic, and support quickly responds to any issues we have encountered. Implementation was easy, and reacting to incidents was seamless once set up. We have been able to integrate monitoring into several products we use and have not found many that do not support it. I sleep better at night knowing we have 24/7 monitoring in place. Review collected by and hosted on G2.com.

The only downside, which is not unique to Cyrebro, is that it takes some time to tweak the monitoring to minimize the false positives. I would rather have a false positive and have to tweak than have something missed entirely. Review collected by and hosted on G2.com.

The Cyrebro platform is intuitive and easy to use, you have complete information close to you Review collected by and hosted on G2.com.

Cyrebro has several flaws that can be worked on internally to improve them. From my personal experience and taking into account that I am located in Colombia, the response times for Cyrebro support are slow, sometimes we require a short log from a team and it takes a long time to give us that information. I understand that the platform has been in the process of migrating to GCP in order to improve these response times.

Things to improve:

Technical support: the client often requests to have X or Y information which only Cyrebro has, when requested, the delivery times are very slow, making us look like the bad guys and damaging our reputation with the client

Log platform: it would be good if we as clients could have access to the logs so we can perform the searches and not depend too much on technical support.

Support: The SOC service is 24/7 but the technical support is not. Sometimes we have had incidents with the client and we have requested support from Cyrebro but they tell us that they do not have staff to work on the case, since for example in Colombia if we have an incident on Saturday Cyrebro cannot because the technical staff is in Israel and they do not work on Saturday, so it leaves us without that factory support.

In summary, the Cyrebro platform is good, practical, interesting, but the technical support has a lot to improve. Review collected by and hosted on G2.com.

It is a cloud solution that greatly simplifies the functions of a SOC, as it allows having N1, N2, and N3 specialists without the need to hire a full staff of trained personnel. Its great adaptability with other solutions allows the client's applications to be connected via API without major difficulty. Additionally, it already has a playbook defined and created by cyrebro specialists with more than 1,000 established base rules that are applied to the client's ecosystem once implemented. Its team of specialists is very well trained, and in case of doubts, support responds promptly, and if greater urgency is needed, it is possible to have a call to review the specific case in both Spanish and English. Also noteworthy is that thanks to its integration with AI and ML, it allows for automated event correlation and information ordering. Review collected by and hosted on G2.com.

Within the less optimal aspects is the report or information that the tool provides about the activity presented over a certain period. Additionally, the filtering of information and event visualization must be done through queries via the platform or to the support team through their ticketing system, as the complete information corresponding to the event to be reviewed is not always included in the investigation, causing the analysis of an investigation to take more time. Review collected by and hosted on G2.com.

The GUI is very simple and intuitive, and alerts are accurate and usefull Review collected by and hosted on G2.com.

We integrate AWS accounts to receive GuardDuty alerts. However, when we encounter issues, resolving them is not simple, even though Cyrebro and Adexus support are always available to help. Review collected by and hosted on G2.com.

the forensics is fast and accuret , alerts is informative Review collected by and hosted on G2.com.

much false positive , deployment is slow due to collector overhead eps is larger than expected Review collected by and hosted on G2.com.

After a few learning curves and what felt like spamming from some of our devices doing actual scans, it is very helpful to quickly rule out a known scan or service vs a rouge event that does need further investigations. Review collected by and hosted on G2.com.

What can feel like constant spamming when an known device/server/service is doing a port scan. But that would be something we might want to filter out in the future. Review collected by and hosted on G2.com.

1. I mostly use Byrebro for my clients who are using paltforms like Sharepoint, AWS, 1Password and Office 365. Cyrebro helps in keeping the essential pieces of data includng the login credentials, environment variables and the resports safe and secure and prohibit any unauthorized entity from accessing it.

2. I along with my client uses it on day to day basis. Review collected by and hosted on G2.com.

1. There definitely was a learning curve when we first ought of integrate and rely on cyrebro for the safety of the assets but after a few weeks everyone in the team started to get a hunch of it and making their life a bit more relaxing.

2. It is not everyone's cup of tea, one must have prior experience as a DevOps expert will be the one who can help you integrate stuff and secure access. Review collected by and hosted on G2.com.

The UI is very intuitive and reactive, and they are allways available to answer questions. Review collected by and hosted on G2.com.

The fact we don't have access to the logs, also they remove the chat. Review collected by and hosted on G2.com.

Platform has built-in communication channels with Cyrebro staff and emphasizes communication between the customer and Cyrebro

EDIT 2024-07-03: After recent platform changes, I would also like to add how easy it is to add, edit and remove log sources now to the platform. Review collected by and hosted on G2.com.

No direct access to underlying SIEM system, although you can request specific queries to be run by Cyrebro staff.

EDIT 2024-07-03: After backend platform changes, CYREBRO has advised they will be introducing the ability to query stored logs directly. Looking forward to this change! Review collected by and hosted on G2.com.

- receive the notification for only the alerts that need my attention

- on each alert, there are all the technical information that caused the raising of the alert

- if needed, the support team helps to analyze the alert

- I can connect several types of object to Cyrebro Review collected by and hosted on G2.com.

-the implementation of a DLC takes time

- in the dashboard, there is no visibility of the usage of the number of licenses Review collected by and hosted on G2.com.