Tracebit canaries cover a wide range of resources, both in and outside of AWS. You can create decoy S3 buckets in your environment, publish fake credentials to endpoints and pipelines, or even create dummy applications in your Okta instance.
Deploying Tracebit took a matter of minutes, even across multiple accounts!
After deploying, you can be confident the canary resources are set up and working correctly because you get notified whenever they aren't.
Alerts arrive in your Tracebit instance within minutes of the activity occurring, giving you confidence that any potential threats are swiftly identified and can be addressed promptly, ensuring your environment stays secure and resilient against compromised identities. I am yet to receive a false positive alert from Tracebit, further reinforcing my trust in the accuracy and reliability of their detection system. Review collected by and hosted on G2.com.
Tracebit handles canary resources and credentials effectively.
I believe their offering could be improved by incorporating automated remediation steps for critical alerts. For example, automatically applying an IAM deny policy to compromised users or roles would be valuable. While this is currently possible through integrations with third-party services like PagerDuty, it requires additional configuration and third party products. Integrating such capabilities directly into Tracebit's platform would enhance security response and reduce dependency on external tools. Review collected by and hosted on G2.com.