Seal Security Reviews & Product Details

Cloudera is adopting Seal Security as an intermediate remediation layer to address high-impact vulnerabilities in the gap between vulnerability disclosure and a full upstream dependency upgrade. Seal provides secure, backported fixes applied directly to existing JAR versions, allowing vulnerabilities to be remediated without immediately upgrading to a new major or minor library version. Review collected by and hosted on G2.com.

Have not found anything disappointing. The team at Seal is very responsive to enhancements. Review collected by and hosted on G2.com.

The product is impressively straightforward and stays focused on its core purpose. It lets us remediate vulnerabilities with a single click, which saves a significant amount of time and reduces the manual effort we used to spend on the process in the past. Review collected by and hosted on G2.com.

This is not a significant drawback of the product itself, but rather a reflection of our usage pattern: we do not encounter a large number of vulnerabilities on a daily basis, so Seal is not used continuously. However, whenever we do need it, it provides significant value and saves a considerable amount of unplanned engineering effort. Vulnerability discoveries are inherently unpredictable, and Seal is there when they arise, helping us address them quickly and efficiently. Review collected by and hosted on G2.com.

I like that Seal Security greatly reduces our time to remediation when a new CVE drops. We don't need to worry about implementing a major or minor upgrade since we can just patch in place, which saves a ton of development time and frustration. Using a combination of both the web UI and the CLI, it's easy to find new vulnerabilities that need to be patched, as well as new packages that need a patch created for them. Review collected by and hosted on G2.com.

There isn't much that I dislike about Seal Security. Their product is easy to use and operationalize. With them being a decently small startup, they may not be as full featured as some of their competitors, but they definitely punch above their weight. They're always willing to jump on a call and take feedback and implement feature requests as we have them and they are able. Review collected by and hosted on G2.com.

I like how Seal Security allows us to rapidly patch our third party dependencies against CVEs without having to upgrade to the latest feature versions of affected dependencies. I appreciate that this lets us resolve vulnerabilities without disrupting our roadmap. I also like that Seal provides world-class support and has put a lot of thought into the tooling required to build around their products to maximize their usefulness. The initial setup was pretty easy, which was a plus. Review collected by and hosted on G2.com.

The product is young, and they've been laser focused on getting the product fit right. As a result there's some trappings that more mature product can offer in terms of audit logging and additional integrations with things like Vanta that would make the experience smoother. Review collected by and hosted on G2.com.

It solves tough engineering problems, like handling a CVE in a deprecated package, which would otherwise take a lot of effort from development teams. Seal removes that friction and enables clean solutions. It also helps address high- and critical-severity issues that don’t have a public fix available yet. Review collected by and hosted on G2.com.

There isn’t much API support available for integrating automated tooling. Also, new fixes for packages that are already sealed for older CVEs still require manual actions. On top of that, the timeline expectations/SLAs for a requested fix aren’t easy to find, and they’re not very clear. Review collected by and hosted on G2.com.

It meets our needs by enabling us to produce CVE patches across our different technology stacks. We also see ROI in a very short time. Review collected by and hosted on G2.com.

The only downside to Seal is that it isn’t an API-first product, so not all information is available through the API. Review collected by and hosted on G2.com.