How much risk are you accepting?

The main difference between the other options and this one is the quality of the personnel within the SOC. It’s their knowledge and depth and the way they handle customers.

The service has increased our analysts’ efficiency to the point that they can focus on other areas of the business. It gives me the ability to allow analysts to do Level 3 and 4 work and stay out of the weeds of the alerts, where you tend to get alert fatigue. The service takes care of much of the Tier 1 and Tier 2 triage…This leaves less for us to handle, which is a good thing.

Outside of using the platform to manage alerts, the feature of the service that we get the most value from is being able to reach out to them and say, “Hey, we might go buy a SIEM,” for example. They give us their overview of what’s out there, what they’ve dealt with, what they integrate with, and what that looks like. That’s been pretty powerful over the years for us.

This has been a positive experience and money well spent. If we had to do it again, we would gladly choose the solution that CRITICALSTART provides, versus going with other solutions or using something in-house where we would probably have to spend double what we are spending now.