It helps us actually protect our internal environment with MFA and not just interactive logins, but PSExec, PS and more as opposed to solutions like DUO that only can protect interactive logins and require to be installed on every workstation to be protected. It's great we can utilize our existing Azure MFA setup we have in place and not require users to download and configure yet another MFA app. And the fact we only have to install on our DC and not every workstation is amazing. Overall it's been a great purchase and are looking forward to them hopefully continuing to develop and refine things. Review collected by and hosted on G2.com.

The dashboard and interface look great, but while it has good looks, there really isn't any actual functionality behind it. Trying to investigate threats or incidents results in clicking yourself in a circle trying to find any relevant information on said specific threat/incident. They have the ability to filter, but it would be nice for them to take you right to the pieces of the log when you clicked.

The workflows on the interface could also be more efficient; there is a lot of good information presented, but you can't click on it to be taken to more information or even take action to mark something as a "false positive", so to speak. You have to go to a completely different page and find that account and mark it there.

They could also be a little more descript in their flagging of events. We have had users get flagged as HIGH or CRITICAL risk but only have a single "Abnormal Authentication" risk indicator. What does that mean, and why did they jump to critical? It would be nice to know that information so we can work to educate or remediate if it's a behavior we can adjust with the user or a configuration change we need to make.

Finally, the PoC and implementation weren't the greatest, I think we had a new guy, but we ended up having some issues that ended up being a software bug that required an update. Review collected by and hosted on G2.com.