Hi everyone! I'm pretty new to evaluating security tools for our cloud setup, and I've been reading a lot about CloudGuard. It seems powerful, but I've also seen a lot of mentions of Prisma Cloud and Wiz as the main alternatives in other threads.
To be honest, those two feel a bit... overwhelming for where we are right now. We're a mid-sized team, and we're looking for something that can help us get a solid handle on our AWS security posture without being a massive, complex platform from day one. Budget is definitely a consideration too.
Could anyone recommend some other alternatives you've looked at or used? I'm curious about tools that might be a bit more focused or maybe easier to get started with. What has your experience been like with them for core things like CSPM and vulnerability management?
Really appreciate any pointers you can share. It's a lot to sort through, and real user experiences help so much 😅
Totally get that feeling! Prisma and Wiz can be like drinking from a firehose when you're just looking for clear visibility. We were in a similar spot last year.
We ended up going with Orca Security for their focus on AWS and the fact you can get meaningful alerts from a read-only scan, no agents needed. The setup was really straightforward. For core CSPM and vulnerability management, it's been great - the dashboard is clean and it prioritizes risks well so you're not just staring at a thousand "critical" issues. Budget-wise, it was much more palatable for us than the big two.
Another one I'd suggest looking at is Lacework. Their pricing changed recently, but their data-driven approach is interesting and might fit a mid-sized team's workflow better. It felt less like a massive platform and more like a focused tool.
Keep it simple.