Netsurion Reviews

Name: Netsurion
Brand: Netsurion
Rating: 4 (24 reviews)

4.2 out of 5

24 reviews
92% willing to recommend

273 followers

What is Netsurion?UNIXBusinessApplication
Price:

Our open XDR platform unifies your existing security telemetry to deliver wider attack surface coverage and deeper threat analytics resulting in greater security visibility. Our SOC does the heavy lifting for you of proactive threat hunting, event correlation and analysis, and provides you with guided remediation. The result is a force multiplier that allows your IT team to be confident and in control again while also maximizing all of your cybersecurity investments.

Get the Netsurion Buyer's Guide and find out what your peers are saying about Netsurion, CrowdStrike Falcon, Splunk Enterprise Security and more!

Netsurion is the #3 ranked solution in top SOC as a Service providers, #4 ranked solution in top Managed Security Services solutions, #13 ranked solution in top Managed Detection and Response (MDR) solutions, #15 ranked solution in top Security Information and Event Management (SIEM) solutions, and #15 ranked solution in XDR Security products. PeerSpot users give Netsurion an average rating of 8.4 out of 10. Netsurion is most commonly compared to CrowdStrike Falcon: Netsurion vs CrowdStrike Falcon. Netsurion is popular among the large enterprise segment, accounting for 45% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 30% of all views.

Helped 767,319 peers since 2012

Featured reviews

John-Berry

Information Technology Manager at ProfitSolv

Sep 11, 2023

I know they are working to resolve this issue, but Netsurion is currently unable to retrieve logs from S3 buckets. We use WP Engine for a lot of web hosting as well as AWS, and both of these platforms use S3 buckets. I would like Netsurion to be able to pull logs from Linux devices. We have some of that capability, and I believe they can do it. However, the way it works with Amazon is strange and glitchy. Therefore, working something out with Amazon would be great. Netsurion's SOC can be a bit too aggressive at times. We have asked them to adjust their playbook because I am tired of being notified about the same issue multiple times a day. I am aware of the issue, and it is not a cause for concern. Let's only take action on this issue if we see an actual problem.

Read full review

Kevin Lohan

Head of IT at a venture capital & private equity firm with 11-50 employees

Aug 22, 2023

The most valuable feature is definitely real-time alerting, especially in situations where someone might attempt to exploit or hack into our network. For instance, if there's an unusual activity with user accounts, like a sudden surge in login attempts, the system promptly sends notifications via email, text, and even phone calls if our initial response is lacking. This holds true regardless of the time, even if it's as late as two in the morning. This capability provides me with a sense of security. Apart from this, my colleagues and I lack the time to meticulously sift through extensive logs and data. Having someone else handle the task of comprehensively analyzing the information we generate, not only pinpointing potential risks for us to counteract but also alerting us in real-time, is immensely valuable. It's truly impressive. Our workload prevents us from achieving this level of vigilance, even if we were to hire more staff. Their performance in this regard is unparalleled.

Read full review

JosephSnyder

CIO at a financial services firm with 201-500 employees

Aug 23, 2023

A SEIM is an SIEM. They all do the same thing. What's valuable about the Netsurion Managed XDR product is the analysis that it brings to the table. They do a really good job of filtering out; it generates a tremendous amount of data. They filter out what's needed and give me what I need to pay attention to. That's hard to do in a lot of the other products. The product provides us with a flexible solution that helps protect our entire IT environment. I only take advantage of it on the server side. I don't need it for my desktops, however, certainly, they offer that. Overall, it is quite flexible as evidenced by the fact that when it's first tuned, you get a large amount of data, and they're able to fine-tune that over time. To me, that's really important. We operate with their SOC. They are really nice guys. Great to work with. In terms of the SOC when it comes to alert monitoring and threat hunting, they do a great job. The fact that they're able to tune it for me over time and build a relationship is helpful. Some of those guys have been there for ten years. Is really important to us. They know what's valuable to us and what we want to see. We have the SOC provide a regular meeting. It's quarterly. We all get together, and I let my engineers do it over the phone. They'll let us know: "We're seeing this. This isn't important." They voluntarily call things to our attention and so on. It's a real value add working with them. The SOC is helpful for eliminating false positives. It filters out unneeded and unnecessary alerts and calls my attention to what's really important and what I need to pay attention to. Expediting incident response is really great. What's really nice is I haven't had to use it. So I don't have any examples. That said, they're really quick to respond. Again, that comes back to the SOC. They're there all the time. So they are looking at our stuff 24/7. We pay for that, yet it's a really valuable aspect of the service. Using the SOC affected our ability to focus on, for example, any other tasks. They've taken a whole bunch of work off my team and made it easier for them to do other important aspects of what we do every day in our bank. Monitoring helped to boost your SecOps productivity. It's decreasing the tedious SecOps management tasks. The time it's saved us per week is an FTE equivalent or more. That's easily 40 to 60 hours a week. It's saving my team. There's no doubt in my mind. It's probably more than that, however, I could confidently say it's 40 to 60 hours a week. The product has reduced the time to detection in my estimation. I haven't had any, however, it's clear to me that they would help. When we have had something that's been sort of fishy, they definitely chime in, and we get a notification from them almost immediately.

Read full review

Valuable Features

The most valuable features of Netsurion include:

its threat detection and response capabilities
visibility into unauthorized downloads and software procurement procedures
managed vulnerability management and IOC reviews
actionable threat intelligence
consolidation of cybersecurity technology
24/7 analysis and alerting by the SOC team
analysis of non-obvious threats
noise reduction in SIEM
EDR component for analysis
remediation for endpoints
exposure of vulnerabilities and guidance for PCI compliance
industry-standard MITRE ATT&CK framework for threat identification and understanding

Room for Improvement

Some areas for improvement on Netsurion are:

1. Lack of feedback on options for taking action in response to threats. Users would like to know if it is possible to take specific actions through the SIEM service or agent.

2. Slow response time in notifying users about identified threats. Users would prefer to be informed promptly rather than hours later.

3. Insufficient understanding of users' networks by the SOC team, which negatively impacts security posture. Users suggest having a dedicated server for Netsurion to avoid resource contention with other servers.

4. Improved communication with the SOC team. Users would like more interaction and assistance in going through generated reports.

5. Need for a web portal instead of receiving data in an Excel spreadsheet. Users would prefer a portal that aggregates data and highlights hotspots, similar to Arctic Wolf.

6. Development of the product to utilize internet options inherent in the operating system for better communication and security. Users suggest redeveloping the application to be more compatible with current technology.

7. Faster response time for operational events, such as lockouts, to enable timely action. Users want quicker updates on non-high security events to optimize network traffic.

8. Improvement in weekly reporting, including timely incorporation of landscape document details.

ROI

Netsurion has had a positive impact on the organization's ability to identify and understand sophisticated threats. The managed SOC component of the solution has been particularly valuable, freeing up staff to work on other responsibilities and saving on the need to hire specialized personnel. Implementing Netsurion has resulted in time and cost savings, as it eliminates the need to hire additional staff or invest in building internal alert systems.

The solution provides actionable results about threats like ransomware, potentially preventing costly incidents. Netsurion also enables the organization to devote time to other projects and improves its overall security posture.

Pricing

The pricing and licensing experience with Netsurion has been positive overall. Reviewers mention there haven't been any surprises with pricing and licensing, as the costs are clearly laid out based on factors such as the number of nodes on the network.

"It is a bit expensive as compared to some of the other products that have come out in recent years. Expense-wise, the only downside is that it is not cheap."
"Our pricing for Netsurion last year was US $52,000 per year."
"Netsurion's pricing is extremely fair and flexible. The price of their SIEM product is reasonable, and you can pay for those services you want on top of that. It wasn't cheap, but it's competitive, and we intend to renew our contract."

Popular Use Cases

The primary use case of Netsurion is to provide managed SIEM services for organizations. It collects log information and events from different systems, analyzes them for security-related issues, and alerts the company.

Netsurion also helps organizations meet compliance requirements such as HIPAA and PCI. It allows companies to monitor their environment for unusual actions and provides protection through a deny-all policy. Netsurion is used by decentralized companies with multiple locations and endpoints, allowing for log forwarding and monitoring on workstations and servers across various cloud platforms.

It is particularly valuable for small businesses that lack dedicated security professionals.

Service and Support

Netsurion's customer service and support have received positive feedback from users. The SOC team is considered the most important part of the solution, with professionals who do a good job. However, there is room for improvement in terms of faster communication.

Users appreciate the fact that they have consistent contact with the same people, who are familiar with their company and previous issues. The support team is responsive and takes care of problems quickly, although there may be a slight delay due to the time difference with the team in India.

Users also mention that the SOC was instrumental in the onboarding process and provides helpful guidance. Netsurion's technical support is highly regarded and accommodating.

Custom requests are handled efficiently, and regular communication and follow-ups are conducted.

Deployment

The initial setup for Netsurion was generally straightforward and easy to deploy. Some users found it relatively simple, especially with the assistance provided by Netsurion's team. They mentioned that the deployment process took some time, ranging from several weeks to 90 days, depending on the specific circumstances.

There were also a few users who encountered challenges during the onboarding process. They noted that technical resources from Netsurion were lacking, resulting in a longer onboarding period than expected.

Scalability

The scalability of Netsurion appears to be highly satisfactory. Users have mentioned that it scales well and has been utilized across their systems without encountering any difficulties. They express confidence in the solution's ability to accommodate future growth, with some even stating that they could expand further without concerns.

While there are additional paid features available, users indicate that the current licensed features are being fully utilized.

Stability

The stability of Netsurion's solution has been mostly satisfactory, with the occasional issue of agents not reporting in.

There have been instances where the software agent had problems, causing it to report as offline even though it was online. This was frustrating and the performance of the hosted on-premise hardware was also poor. There were severe hardware problems with the server that were not communicated to the user until they needed to check on something.

However, other than these specific incidents, there has been no downtime and Netsurion is generally considered highly stable.

There have been minor issues such as specific endpoints not reporting due to misconfiguration and these were promptly fixed.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Netsurion Buyer's Guide for additional reliable information.