Find out in this report how the two Security Information and Event Management (SIEM) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
In the case of optimization, it has helped return on investment to somewhere close to 50%.
we have saved a significant amount of time and resources moving from a manual approach to something that's more automated.
The return on investment with Cynet is pretty good, as it doesn't require a dedicated resource to manage, being highly automated.
They had extensive expertise with the product and were able to facilitate everything we needed.
If they could enhance their internal logging, we won't require Cribl support to engage.
The community, including the engineering and sales teams, is available on Slack and is very supportive.
Their SOC side support, when a threat is detected, is excellent.
My experience with the technical support of Cynet is excellent; they are just one click away.
Based on our needs, they schedule remote sessions and resolve the issues.
It's an enterprise version, and we have a good amount of users using this solution.
I don't need to talk to a Cribl engineer to connect a new log source.
Cribl is quite scalable, as we could add worker nodes as our data grows.
The solution is highly scalable.
We can deploy Cynet for 50,000 users, and we have deployed it at that scale, with the capability to scale higher to 100,000 users without any challenges.
Cynet is very scalable.
I would rate the stability as ten out of ten.
If the pipeline is down and we receive an alert that it's not sending information to the log collection platform for more than one or two hours, if we receive an alert, it would be great.
Cribl is quite stable and doesn't crash; there's no unusual behavior.
Within six years of usage, we have not had any issues such as outages or downtime.
If we can have more internal logs and more debug logs to validate the error, that would be beneficial because instead of reaching out to Cribl support, we can troubleshoot and find the root cause ourselves.
In terms of large datasets—whether they originated from network inputs, virtual machines, or cloud instances—ingesting the data into the destination was relatively easy.
Since Cribl is such a large platform with numerous features, having a clear, structured approach would make it easier for me and others to understand and utilize its capabilities.
There should be more options than deploying solely through group policy, as the assumption that GPO is working isn’t always the case.
Having a DLP feature would also add value.
Integration with local Active Directory, not only Azure AD, is a must.
Over time, the licensing cost has increased.
Cribl is very inexpensive, with enterprise pricing around 30 cents per GB, which is really decent.
I think the pricing of Cynet is fair and one of the better options in the market.
The price of Cynet is reasonable considering its features and support.
Cynet does not ask for additional costs for add-on features.
The data reduction and preprocessing capabilities make Cribl really unique.
Cribl has a feature called JSON Unroll or Unroll function that allows you to differentiate the events; each event will come ingested as a single log instead of piling it up with multiple events.
The community on Slack is excellent for solving questions and getting ideas.
The valuable aspects of Cynet are its EDR and XDR components, which are available at a reasonable price point.
The most effective features of Cynet are its ransomware protection and lateral movement deception.
The SOAR function, deception, and forensics are very useful.
Product | Market Share (%) |
---|---|
Cribl | 1.2% |
Cynet | 1.0% |
Other | 97.8% |
Company Size | Count |
---|---|
Small Business | 9 |
Midsize Enterprise | 4 |
Large Enterprise | 8 |
Company Size | Count |
---|---|
Small Business | 29 |
Midsize Enterprise | 7 |
Large Enterprise | 12 |
Cribl offers advanced data transformation and routing with features such as data reduction, plugin configurations, and log collection within a user-friendly framework supporting various deployments, significantly reducing data volumes and costs.
Cribl is designed to streamline data management, offering real-time data transformation and efficient log management. It supports seamless SIEM migration, enabling organizations to optimize costs associated with platforms like Splunk through data trimming. The capability to handle multiple data destinations and compression eases log control. With flexibility across on-prem, cloud, or hybrid environments, Cribl provides an adaptable interface that facilitates quick data model replication. While it significantly reduces data volumes, enhancing overall efficiency, there are areas for improvement, including compatibility with legacy systems and integration with enterprise products. Organizations can enhance their operational capabilities through certification opportunities and explore added functionalities tailored towards specific industry needs.
What are Cribl's most important features?Cribl sees extensive use in industries prioritizing efficient data management and cost optimization. Organizations leverage its capabilities to connect between different data sources, including cloud environments, improving both data handling and storage efficiency. Its customization options appeal to firms needing specific industry compliance and operational enhancements.
Cynet provides comprehensive endpoint protection and advanced threat detection, offering intuitive deployment and monitored support. It ensures real-time visibility and minimal management, enhancing security for diverse and remote teams.
Cynet integrates seamlessly with existing infrastructure, providing an efficient solution for endpoint protection, threat detection, and response. Its automation, scalability, and stability are key benefits. Users benefit from real-time network visibility, ransomware protection, and deception capabilities. Cynet serves as a robust alternative to CrowdStrike, offering a multifaceted approach to security operations, especially in environments needing continuous threat monitoring and zero-day threat management. Areas needing improvement include mobile device support, enhanced reporting, third-party integrations, and AI-based detection.
What are Cynet's most important features?In the financial sector, Cynet's ability to support efficient threat detection and endpoint protection is crucial. Healthcare industries leverage its data protection features for compliance and security. In manufacturing, real-time threat monitoring supports safeguarding intellectual property. Retail sectors benefit from its scalability and minimal management demands, helping secure diverse, distributed locations.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.