Seemplicity Remediation Operations Platform

Seemplicity  is the main tool where I manage our security events, incidents, alerts, and everything that is security-related. It is a central tool that receives all alerts, all events, and all findings and performs three primary functions: deduplication, prioritization, and managing the entire remediation process and queue.

Managing the remediation process with Seemplicity  begins with receiving alerts from the source system of all our security tools. The alerts get deduplicated, which significantly reduces the noise that our teams used to experience and helps us considerably. The alerts are then prioritized, ensuring that we focus only on urgent topics and avoid dealing with low-risk or low-impact issues. Once ready, Seemplicity is configured to open a ticket for the specific team that should address a specific incident or alert. The team receives an open ticket based on standards and definitions; some teams can handle two tickets per sprint, while others can handle five per sprint, and this is all defined within the system. It opens the ticket and then helps me manage and track the remediation process or the fixing of the ticket as it happens, measuring SLA compliance and the actual work that was completed when the developer or security person indicates it is done. In essence, it helps me prioritize, select the right tickets, and share the right information in the ticket with the team, which is important because sometimes tickets from the original systems do not include all details and it ensures that everything is fixed on time. The management tools in Seemplicity help me ensure that nothing is stuck and that the teams across the organization, whether in security, DevOps, IT, or engineering, are addressing their tickets in the agreed-upon SLAs.

In recent months, we have started to use Seemplicity's investigations and analysts feature, and it also appears to be a good capability. It is not fully utilized yet, but it does show potential. We see many instances where based on the original data from security systems, Seemplicity determines that a certain ticket is of high priority and should be addressed, but when we handle it, we often find that some information is missing or it is not really such a high priority. The analysts feature brings in additional AI capabilities where they investigate the topic in depth. So far, we have found that their findings are very accurate. If we decide to implement it and turn it on for all cases, or at least for all high-critical and high-risk issues, it will probably reduce the workload on our human analysts.

Seemplicity offers three best features. One is the option to deduplicate alerts between security platforms, which is something we do not have the capability for anywhere else. The second is managing the remediation queues, which is truly useful; it ensures that developers and the security team receive the right tickets in the right amount, with the right priority and right details, and then tracking them is very useful. It is a single point to manage all our security activity.

The deduplication feature helps my team day-to-day by reducing the amount of work. When we examine security incidents, usually one security flaw—a new zero-day vulnerability in a library we use—triggers alerts across different systems, from our vulnerability management platforms to our real-time runtime monitoring systems to our Wiz  platform, showing us the same issue across multiple instances. This might generate hundreds of different alerts. Seemplicity allows us to deduplicate them into one single action that a security person or developer needs to perform to fix all of these alerts. Instead of having 100 or 200 different tickets opened to different teams, we have a very specific team that receives one single ticket to solve it all. When we started with Seemplicity, we saw an 85% reduction in the number of tickets through deduplication, and that is significant for our teams who are swamped with issues.

Seemplicity has positively impacted our organization overall by reducing the number of tickets that are opened, allowing the team to really focus on what is important. We have less noise, so we are very focused, and using this tool has helped us reduce the number of vulnerabilities and issues we address. We are at the point where we have zero critical issues and probably less than ten high-risk issues, which we are constantly addressing and will likely resolve soon. We are also beginning to tackle medium and low-risk issues, which we never could before. Having this deduplication reduction helps us really focus on advancing our security posture.

Every tool, including Seemplicity, can improve, and I think it needs to further enhance its deduplication capabilities and understand how to integrate with more security tools, especially as new AI security tools emerge. Seemplicity needs to know how to digest data from these tools and how to deduplicate it. Additionally, there is room for improvement in a generic approach to queue management and more proactive collaboration with security analysts, developers, and infrastructure teams on tickets—not just opening them, but really collaborating.

I have been using Seemplicity for the last four years.

Seemplicity is stable.

Seemplicity has scaled to our needs without any issues.

The customer support is excellent. They are actually located in the same building as we are, so it is really easy for us. If we need support, their team simply goes down the elevator and steps into our office. I would rate customer support a 10.

When we started using Seemplicity four years ago, there was no other solution doing what Seemplicity does, at least none that we knew of, so we did not have such a solution before.

We estimate that Seemplicity actually saves us most of our resources by reducing the number of alerts, which allows us to maintain the same SLA with a smaller security team. We estimate that, on average, Seemplicity saves us two full-time employees in the security team.

My experience with pricing, setup cost, and licensing was positive. The cost was easy to manage, and we never had any issues. Pricing and licensing were straightforward, and we had direct discussions with the CEO of the company, which allowed us to arrive at a price point that worked for both sides.

Before choosing Seemplicity, we did not evaluate other options. We started with them in the very early stage since it was a very innovative startup, so we did not have any other options to choose from. As they grew, other tools like Dazz came to us and presented, and we saw them, but we never really tested them because we were happy with Seemplicity.

Seemplicity's AI capabilities are good for us; we have integration to what we need, and I believe it is secure as it mostly keeps metadata, so there is no real personally identifiable information involved.

Its accuracy and reliability of output are mostly dependable. Over time, we have worked extensively with the team to ensure they can read from all our security systems, ingest the data, and deduplicate it well. It is not 100% perfect, and there are still some gaps, but overall, it is quite accurate.

I would advise others looking into using Seemplicity to check if it integrates with their security tools to ensure they have support for their main security tools. I would also tell them not to go slow when integrating but to fully integrate all their security tools in Seemplicity, because the value lies in using and deduplicating everything, not just part of the security tools. I would rate this solution an 8 overall.