EclecticIQ Platform vs. Norton Small Business

ElecticIQ has an architecture where it usually needs decent computing power within the organisation. The central console along with the ELK servers and PostgreSQL sever needs their own space in a distributed setup. This could be a little too expensive for small-scale organisations. But for the organizations having mid to large-scale networks. EIQ is a decent solution to serve the purpose.

Incentivized

We are a small company; Norton Small Business gives us the freedom for our remote employees to work securely using their personal laptop /smartphone. Less appropriate: Someone with a few separate locations that require separate cybersecurity environment but would still benefit from centralized management.

Incentivized

• Effective correlation of IOCs
• Averaging out the Confidence Score based on different intel sources.
• Serves as an excellent liaison points between the Intels and SIEM/SOAR stack.

Incentivized

• Effective Outcomes
• Transparent & Customised Pricing
• Ease of Use

Incentivized

• Misses on a global search bar which can directly gives out the result like VirusTotal.
• The GUI could be more friendlier. Too many filters and graphs may overwhlem the user sometimes.
• The ElasticSearch(searching for IOC in the in-house EIQ database) is a little slow compared to its counterparts.

Incentivized

• perfectly works for us, nothing as of now
• works as expected, found reasonable for us

It's good for a small business that needs cybersecurity without needing to spend a lot of money. Besides being affordable it seems to be extremely, reliable, and easy to use.

Incentivized

The most important feature of EclecticIQ which gives it an edge compared to other TIPs is that it performs segregation of IOCs based on the relevance of it and the links that IOCs might have which other adversaries. The graphical format mapping where the user can easily figure out how the IOCs have connections to different binaries is another advantage. One can set the half-life time for an IOC which will reduce the confidence score as per one's need.

Incentivized

We did not actively consider any other software. Overall we did do a basic understanding of a pricing & features and found that the offerings from Symantec were better than others even prima facie. At the current time for an organisation such as ours we do not believe that there is any other option worth active consideration

Incentivized

• Positive: Effective usage of all the premium Intels in a uniform fashion. No need to log in to each tool time and again.
• Positive: SOC Analysts spends lesser time on the internet and the analysis for the IOCs with graphical format is fulfilled by EclecticIQ.
• Negative: Higher costs over the resource utilization in the initial setup.

Incentivized

• Money saved on cybersecurity products
• Time saved: ease of use
• Reliable

Incentivized