Attivo BOTsink

Attivo BOTsink is a great network security tool for organizations that may not have a dedicated security team, but need to have threats reported in real time. It seems well suited for medium to large sized organizations that may have several subnets, VLANs, and remote locations.

Incentivized

• Identifies devices
• Provides threat details in real time
• Provides network topology with potential threat paths

Incentivized

• More fine tuning of threat detection capabilities needed
• Users should be able to modify AIML configuration
• Improving the display dashboard

Incentivized

Attivo BoTsink was selected based on cost price and wide coverage of detection capabilities. Our decision was primarily based on reducing efforts to identify and mitigation of attacks. The ease of deployment was additional factor in decision making. As compared to Zscaler Deception and SentinelOne Singularity I found Attivo BoTsink detects more threats

Incentivized

• Helped reduce 20% of Security teams time in threat detection
• Reduction of 40% of attacks
• Automated deployment helped in improving efficiency of the team by 30%

Incentivized