Sysdig Secure Reviews & Product Details

Sysdig provides a powerful engine to scan images on the fly, generating alerts and valuable insights in which assets may be vulnerable. Also, it gives you the correct version to patch, making it easy to correct such issues. It is easy to deploy and operate and the customer service is top-notch. Review collected by and hosted on G2.com.

I wish Sysdig's cloud-native solutions would work better in conjunction with AWS. The Cloudtrail connector does not deliver as much value as the image scanning tools. I wish Sysdig's cloud connector could gather more information about vulnerabilities in a given account and gives us pathways towards a more safe cloud environment natively without having to deploy additional resources. Review collected by and hosted on G2.com.

We started our journey with Sysdig because of the flexibility of the underlying Falco rules engine. What has kept us with Sysdig is that flexibility along with continued feature additions that continually add greater value. We started with Container Security and now have CSPM, deep vulnerability information and the beginnings of infrastructure-as-code policy enforcement and drift control. In addition, their customer service is stellar. They keep us up-to-date as a customer with their roadmap and take our feedback seriously leading to great product rollouts. Review collected by and hosted on G2.com.

As with all alerting systems it can be difficult to get signal from the noise. The continued feature additions, especially rule exceptions and the automated tuner have greatly reduced the cycle time required to bring down the noise. I appreciate the focus by the Sysdig team in this area. Like all tools, it's an ongoing process to keep alerting trimmed to what's important. Review collected by and hosted on G2.com.

The onboarding experience was great with step-by-step instructions on how to configure and make use of various functionalities of the product. We were able to quickly get value out of the product by using existing pre-defined rules. Additionally, we have regular catchup with our account manager for feedback, queries, and review to see if we're making the best use of the product. Review collected by and hosted on G2.com.

There are some quality-of-life features and improvements that we'd like within the product to make our life easier, such as JIRA integration and dismissing alerts within the dashboard. These have been fed back through so they are in the roadmap and we're kept in the loop of the progress of these features. Review collected by and hosted on G2.com.

Sysdig's new runtime vulnerability scanner is super cool! It not only shows the typical vulnerability information, categorizing CVEs into Critical, High, etc, but it also shows you which one of those vulnerabilities is loaded into memory at runtime and exploitable! This helps us prioritize which containers to patch! Review collected by and hosted on G2.com.

As with most rule/alert based security tools the tooling can generate a lot of noise if someone isn't tuning the rules engine. The UI does provide an easy way to add entries to the runtime tuning engine, as well as add custom rules/exceptions to filter down the noise. Review collected by and hosted on G2.com.

Sysdig Forensics is one of the coolest features I have seen in a security tool. It gives us a full audit trail of a security event, such as when there is unauthorized access to a container, and gives us details on what was changed in files and who did it. Review collected by and hosted on G2.com.

The written documentation for Sysdig with regards to Secure could include more use cases and examples on setting up alerts. The console also needs the feature to be able to download reports after drilling into a dashboard. Review collected by and hosted on G2.com.

* the functionality offered is very comprehensive

* every component offered is solid functionality to increase compliance

* we can choose to implement different components, according to the current maturity / needs of our platform Review collected by and hosted on G2.com.

* depending on the component there is a steep learning curve involved

* since the capabilities offered are so comprehensive - navigating the UI and implementing certain things sometimes becomes challenging Review collected by and hosted on G2.com.

Sysdig provides visibility and alerting into what happens in the k8s clusters, scans containers and provides information and alerts from the cloud account level. Review collected by and hosted on G2.com.

Like every tool with alerting functionality, it requires some work when it comes to tunning and limiting false-positive alerts. The number of out of the box alerts is amazing but still some tunning is required. Review collected by and hosted on G2.com.

With the ease of integration with pipelines and functioning in clusters, we can fix vulnerabilities in images before its deploy and after deployment. Support is fully available when we need it Review collected by and hosted on G2.com.

We work by fixing the vulnerabilities of the images, so sometimes the vulnerable library is a dependency of a dependency and it is not always so easy to identify how to fix it. Review collected by and hosted on G2.com.

I love the falco rules integration; Industry standards.

Automatic rules tuning can adjust alert levels based on expected workloads.

I love the overview page where I can see my overall security posture by cluster. Review collected by and hosted on G2.com.

The runtime scanning is a little resource intensive.

It's a little pricey. Review collected by and hosted on G2.com.

We started using Sysdig after seeing the features like Runtime. It is very customizable and easy to use. Sysdig suggests the correct version to patch and gives valuable insights. Review collected by and hosted on G2.com.

Documentation should be updated from time to time. Review collected by and hosted on G2.com.