The user interface could be made simpler. The truth is that there is such a shortage of qualified security professionals that customers who are not paying for world-class SOC services may end up with less trained, less experienced staff looking at the alerts and reports. This can make it difficult for them to tweak the reporting engine to properly identify what they are discovering and report it to the customer. I'm not sure if this is as much a Gurucul issue as it is a problem with the staff using the tool. However, the simpler the interface and the easier it is to perform basic functions, the better. I don't think this is something that is ever truly complete. The whole purpose of product improvements and constant iteration and development is to address these kinds of issues.
