I primarily use it for lookups of suspicious IPs/domains/alerts as part of my day-to-day job. What I really like is that the search is pretty fast even when there are lots of results returned. Sometimes I'll grab one IOC from an alert and just search here to see where else it was detected. This functionality is extremely helpful to me as I don't have to hop between tools to check. Review collected by and hosted on G2.com.

Initially I felt lost with the layout of the tool. Wanted searches to return specific things and had to retry or consult docs. Review collected by and hosted on G2.com.

I use Google Security Operations (Google SecOps) to enhance threat detection, security monitoring, and incident response across the organization. It's a centralized platform that lets security teams collect and analyze secure data from multiple sources. One feature I particularly appreciate is the platform's high-speed search and investigation capabilities. It allows analysts to quickly explore large volumes of security data and uncover meaningful insights. I also appreciate the platform's ability to handle large volumes of security data without sacrificing performance. The speed of searching, correlation, and investigating events is impressive and helps reduce the time spent on manual analysis. Review collected by and hosted on G2.com.

I find the dashboard and reporting customization lacking flexibility. While Google Security Operations provides good visibility into security events and operational metrics, it would be even better if there was more flexibility to tailor insights specifically to meet our unique security objectives and stakeholders' needs. Review collected by and hosted on G2.com.

I like the centralized visibility that Google Security Operations offers. It helps me by bringing logs and security telemetry from different environments into one place, making it easier to see the big picture and find relationships between them. I also appreciate the investigation capabilities, such as fast search and contextual information correction, which help me determine whether alerts are genuine threats, what was affected, and how the activity unfolded. Additionally, the threat detection and automation features are a big plus for me. Review collected by and hosted on G2.com.

The platform can be complex, taking time to configure and learn, especially for teams new to SIEM/SOAR tools. Fine-tuning alert tooling to reduce false positives can require significant effort. I would prefer a simpler configuration, easier alerting, and more streamlined integration, without sacrificing the platform's depth. Also, cost can be a concern due to data ingestion and retention. While automation capabilities are strong, they still require specialized expertise. Review collected by and hosted on G2.com.

First of all, Security Operations is easy to use and integrates easily. It performs well and is easy on the pocket.

I did face an issue once, but their support was good and responded quickly. Review collected by and hosted on G2.com.

For startups, it can be quite expensive, and the learning curve is steep for beginners. It takes time to really get hands-on with it and feel comfortable using it. Also, you can’t fully customize it according to your needs. Review collected by and hosted on G2.com.

I appreciate Google Security Operations for its complementary 12-month hot data and seamless data structuring. The retroactive threat hunting feature is something I enjoy as it provides a streamlined workflow. I also like the speed of Google’s search, its cost-effectiveness for retention, the unified data model, and integrated intel and automation. The ability to write a rule in plain language over a year's worth of data in seconds to quickly confirm network cleanliness is impressive. Review collected by and hosted on G2.com.

I think Google Security Operations could improve on its steep learning curve and the interface feels fragmented. The executive reporting is also weak, which makes it less effective for high-level overviews. Additionally, while activating the cloud tenant part is fast and straightforward, configuring the data pipelines to make it functional requires meticulous engineering. Review collected by and hosted on G2.com.

I like that Google Security Operations brings data available from different platforms and provides an overall status. It's convenient to fetch data, so I don't have to waste my time or deploy/hire extra employees to do that work. Using it with other monitoring and security tools makes it a better tool. The ability to bring data from different platforms and sum it up in one place, as well as the cost and scalability factor, were major benefits when we switched from Splunk. Review collected by and hosted on G2.com.

It's the initial setup and customization process that I found challenging to suit my organization, besides that is alert management. Setting up data sources and their integration feels more complex and time-consuming. I also think the dashboard can be more customizable according to the tasks. Review collected by and hosted on G2.com.

It makes tracking regulatory compliance, like SOC2 and HIPAA, feel effortless. The continuous monitoring, real-time security posture checks, and threat-detection dashboards give our compliance team full visibility without creating heavy operational overhead. Review collected by and hosted on G2.com.

Pricing is a concern. I’ve also run into some bugs when the tool is configured at the org level, and there’s no visibility at the project level. Executive reports for non-technical stakeholders often end up requiring manual query configuration. Review collected by and hosted on G2.com.

I like how Google Security Operations brings threat detection, investigation, and response together in a single workflow. Its search and analytics capabilities make it easier to connect signals and investigate incidents quickly. The AI features are also helpful for reducing manual work and enabling teams to reach actionable insights faster. Review collected by and hosted on G2.com.

The platform offers a lot of capabilities, but that also means the interface can take some time to learn and navigate efficiently. Some of the more advanced features may require additional tuning and expertise to get the most value out of them. I’d also like to see clearer, more straightforward pricing guidance, along with a simpler onboarding experience for smaller teams. Review collected by and hosted on G2.com.

I’ve found Google Security Operations to be a very capable platform for monitoring and investigating security events.

I especially appreciate the visibility it provides across different security data sources, and how quickly we can search through large amounts of information when we need to dig into an incident.

The main downside for me is the learning curve, which can feel a bit steep at first. Review collected by and hosted on G2.com.

It took some time to understand the platform and configure it to match our requirements. I also feel that the overall cost could be a concern for smaller organizations with limited security budgets. Review collected by and hosted on G2.com.

I like having security alerts and investigation tools in one place. It makes it easier to review activity and spot potential issues without jumping between different tools. Also, the search and filtering options are also useful when I need to look into specific activity/setting or quickly narrow down an issue. Review collected by and hosted on G2.com.

I sometimes find the interface a little busy, especially when there are a lot of alerts or information to review at once. Some settings are also not where I would expect them to be, which can slow things down when making changes. Review collected by and hosted on G2.com.