Galvanize IncidentBond vs SECDO Platform vs VMware Carbon Black Cloud comparison

Cancel
You must select at least 2 products to compare!
Galvanize Logo
49 views|35 comparisons
100% willing to recommend
Palo Alto Networks Logo
260 views|76 comparisons
75% willing to recommend
VMware Logo
576 views|431 comparisons
93% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Galvanize IncidentBond, SECDO Platform, and VMware Carbon Black Cloud based on real PeerSpot user reviews.

Find out what your peers are saying about VMware, ServiceNow, IBM and others in Security Incident Response.
To learn more, read our detailed Security Incident Response Report (Updated: April 2024).
769,662 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The customization and the transparency of data while still maintaining a mostly user-friendly UI, are key features. It allows for me, as an engineer, to evolve the individual components and modules, and to create a much more meaningful picture than the individual pieces in isolation ever could."

More Galvanize IncidentBond Pros →

"Technical support is great. Palo Alto is extremely helpful and responsive.""It basically automates the entire alert investigation process.""The ease of deployment is a valuable feature."

More SECDO Platform Pros →

"It is nice when you're in a situation where you think someone's device is compromised and that there's some malware getting into your fleet.""For setup, the server can be given to you as a VM image and with minimal configuration needed.""The most valuable feature of VMware Carbon Black Cloud is the possibility of securing any PC worldwide.""Probably the most valuable feature of CB Response is its ability to isolate a host and take it off the network, so it's not spreading anything. We have two security operations centers around the globe. When an SOC analyst sees something on an endpoint, they can use Carbon Black Response to isolate that host from the customer's environment and prevent any kind of lateral spread.""VMware Carbon Black Cloud is a user-friendly solution that can isolate machines from the rest of the network.""We are able to remotely isolate exploited endpoints in seconds and perform a live deep dive of any endpoint into its running processes (as necessary) without the need for extra scripts.​""They're highly stable in comparison with other solutions I have.""Integration and scalability are the most valuable."

More VMware Carbon Black Cloud Pros →

Cons
"Stable – Release – Experimental" system with their releases, and all the proper checks and balances, I’d be an incredibly happy individual. I can appreciate the cause and affect, wherein the customization of the tool drives rapid release schedules, and the paradox that creates with the idea of stable releases. I’d also like more transparency about known bugs and issues."

More Galvanize IncidentBond Cons →

"Many will try to use this as an out-of-the-box solution, however, it needs to be configured to fit what a company would like to do with it.""The price should be reduced in order to be more competitive in the market.""Maybe the notifications setting could use a simpler setting."

More SECDO Platform Cons →

"We are subscribed to FS-ISAC threat indicator, but have been unsuccessful in adding it to our alliance feeds.""The support team of Carbon Black CB Response needs improvement. At present, they need a lot of information. Then they give you an answer that they already gave you. You tell them it didn't work, and then they take a long time.""Additionally, it is complex to use, and the pricing should be improved.""The solution needs to simplify the process of adding custom watchlists, as well as embrace YARA for rule creation.""The product detects too many false positives initially and it could integrate better with other security solutions.""Technical support for the solution should be improved because there is a scarcity of support teams in the Middle East.""One area for improvement is the maturity of its vulnerability features.""The solution's support could be improved."

More VMware Carbon Black Cloud Cons →

Pricing and Cost Advice
Information Not Available
  • "Be sure of the actual number of endpoints in your company."
  • "The price of this solution is the highest in the market, although there are no costs in addition to the standard licensing fees."
  • More SECDO Platform Pricing and Cost Advice →

  • "We had no issues purchasing through our preferred reseller and were able to get a fair price even when not purchasing direct. Carbon Black Enterprise Response didn’t break the bank, though adding on the matching antivirus and anti-malware components of the Protect product was more than we could afford, even with some discounting. Cb Response is really designed to complement Carbon Black’s Defense product. While Response can be used on its own, coupling with Defense seems like the best strategy if you can afford the price tag."
  • "Purchase Professional Services up front as part of the implementation package, then renew hours annually to ensure you have adequate support for upgrades and enhancements. Overbuy by at least 10% to account for infrastructure growth."
  • "Pricing for this solution could be made lower."
  • "The solution is very inexpensive so there is great cost savings to using it."
  • "You need to pay for the licensing of the product. The pricing is costly."
  • "VMware Carbon Black Cloud is an expensive solution."
  • More VMware Carbon Black Cloud Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Security Incident Response solutions are best for your needs.
    769,662 professionals have used our research since 2012.
    Questions from the Community
    Ask a question

    Earn 20 points

    Ask a question

    Earn 20 points

    Top Answer:I can recommend Carbon Black, an award-winning next-gen anti-virus (NGAV) and endpoint detection and response (EDR)… more »
    Top Answer:Carbon Black offers two different levels of Endpoint Detection and Response. One is the VM Carbon Black Cloud Endpoint… more »
    Top Answer:Threat hunting is the most valuable feature of VMware Carbon Black Cloud.
    Ranking
    Views
    49
    Comparisons
    35
    Reviews
    0
    Average Words per Review
    0
    Rating
    N/A
    Views
    260
    Comparisons
    76
    Reviews
    0
    Average Words per Review
    0
    Rating
    N/A
    Views
    576
    Comparisons
    431
    Reviews
    5
    Average Words per Review
    554
    Rating
    8.0
    Comparisons
    Also Known As
    IncidentBond, Rsam SIRP, Rsam Incident Management, Rsam Security Incident Response Platform
    Carbon Black CB Response
    Learn More
    Overview

    Rsam’s Security Incident Response Platform (SIRP) simplifies and speeds monitoring and resolution. Our dynamic workflow can replicate any existing incident management process and allows you to make changes as your processes evolve - all from a single interface. Track the lifecycle of a security incident and coordinate actions quickly and with ease. 

    SECDO enables security teams to identify and remediate incidents fast. Using thread-level endpoint monitoring and causality analytics, SECDO provides visibility into every endpoint along with the context necessary for understanding whether a suspicious activity is a genuine threat. Unique deception techniques force threats like ransomware out into the open early, and trigger automated containment and remediation.

    SECDO provides the most intuitive investigation experience available so you can quickly unravel complex incidents across the organization.  You can investigate incidents detected by SECDO as well as alerts from the SIEM. SECDO visualizes the attack chain so you immediately understand the “who, what, where, when and how” behind the incident. Then, based on an analysis of exactly how endpoints were compromised, SECDO surgically remediates the incident with minimum user impact.

    Fortify Endpoint and Workload Protection Legacy approaches fall short as cybercriminals update tactics and obscure their actions. Get advanced cybersecurity fueled by behavioral analytics to spot minor fluctuations and adapt in response. Recognize New Threats Analyze attackers’ behavior patterns to detect and stop never-before-seen attacks with continuous endpoint activity data monitoring. Don’t get stuck analyzing only what’s worked in the past. Simplify Your Security Stack Streamline the response to potential incidents with a unified endpoint agent and console. Minimize downtime responding to incidents and return critical CPU cycles back to the business.
    Sample Customers
    Information Not Available
    Valley National Bank, IDT Corporation
    ALLETE belk
    Top Industries
    No Data Available
    VISITORS READING REVIEWS
    Computer Software Company17%
    Financial Services Firm12%
    Energy/Utilities Company9%
    Real Estate/Law Firm7%
    REVIEWERS
    Financial Services Firm27%
    Computer Software Company18%
    Healthcare Company18%
    Insurance Company9%
    VISITORS READING REVIEWS
    Computer Software Company17%
    Financial Services Firm15%
    Real Estate/Law Firm8%
    Energy/Utilities Company7%
    Company Size
    No Data Available
    VISITORS READING REVIEWS
    Small Business27%
    Midsize Enterprise16%
    Large Enterprise57%
    REVIEWERS
    Small Business31%
    Midsize Enterprise25%
    Large Enterprise44%
    VISITORS READING REVIEWS
    Small Business25%
    Midsize Enterprise11%
    Large Enterprise65%
    Buyer's Guide
    Security Incident Response
    April 2024
    Find out what your peers are saying about VMware, ServiceNow, IBM and others in Security Incident Response. Updated: April 2024.
    769,662 professionals have used our research since 2012.