Varonis for Security Hub Extended

What do you like best about the product?

What I like best about the Varonis Data Security Platform is its ability to provide deep visibility into where sensitive data resides, who has access to it, and how that data is being used across both on-premises and cloud environments. The automated data classification, permissions analysis, and risk prioritization significantly reduce the manual effort required to identify overexposed data and remediate security risks.

What do you dislike about the product?

The biggest drawback is that the platform has a steep learning curve, especially during the initial deployment and tuning phase. Because Varonis provides a large amount of security and permissions data, it can take time to understand the dashboards, prioritize findings, and fine-tune alerts to reduce noise. Initial scans and indexing may also require significant time and infrastructure resources in large environments. While the platform is powerful, some advanced features require additional licensing, which can increase overall costs. Reporting and customization could also be more intuitive for users who are not security specialists.

What problems is the product solving and how is that benefiting you?

Varonis Data Security Platform has helped us identify and reduce data exposure by providing visibility into where sensitive data is stored, who has access to it, and how that data is being accessed. It has simplified the process of identifying excessive permissions, stale data, and potential insider or external threats through continuous monitoring and behavioral analytics. The automated data classification and risk-based recommendations have reduced the time spent on manual audits and remediation, while improving our overall security posture.

What do you like best about the product?

We use the Varonis platform extensively for ICFR reporting for our customers. We have also leveraged it on a number of occasions to perform security investigations because it offers rich detail regarding file moves and deletions. We have also used the SaaS MDR services which have identified and help remediate security concerns.

What do you dislike about the product?

Depending on which vertical your company is in and how large, sometimes the cost of the platform can be a concern. Overall the benefit does outweigh the cost, especially when you work in a regulated space that requires a staunch security posture.

What problems is the product solving and how is that benefiting you?

MDDR services are a nice compliment to your SOC, whether outsourced or on prem. Detailed file moves, sensitivity labeling and alerting is absolutely necessary for ICFR reporting.

What do you like best about the product?

What stands out most about the Varonis Data Security Platform is its unified approach to data visibility and behavioral analytics. It seamlessly maps identities and access across complex hybrid environments—AWS, SaaS, and on‑premises—while automatically classifying sensitive data and establishing a baseline for normal behavior. Its AI continuously calculates and reduces the "blast radius" of over‑permissioned files, enabling abnormal activity to be detected in real time. It also scales smoothly across petabytes of data through incremental scanning, avoiding performance bottlenecks and high infrastructure costs.

What do you dislike about the product?

While Varonis is incredibly powerful for data visibility, its biggest drawback is its pricing and steep total cost of ownership (ROI), which can heavily strain budgets for mid-sized organizations. Because the platform is highly modular, the costs quickly stack up as you add coverage for different SaaS apps, cloud providers, and automated remediation features. Additionally, the UI/UX and onboarding present a sharp learning curve; configuring policies, clean-up rules, and data classification labels requires dedicated, specialized administrative overhead just to prevent an influx of false-positive alerts. Finally, while its incremental scanning is optimized, deploying its on-premises collectors or orchestrating massive initial scans across legacy environments can cause temporary performance friction and demand substantial infrastructure resources.

What problems is the product solving and how is that benefiting you?

Varonis addresses the critical problem of unstructured data sprawl and identity over-privilege across complex cloud, SaaS, and hybrid environments. By automatically mapping where sensitive data resides and who has access to it, it continuously removes excessive permissions to enforce a strict least-privilege model. The main benefit is that it significantly reduces your environment's "blast radius"—preventing a single compromised account or internal AI tool from accessing or leaking confidential files. Furthermore, because its behavioral analytics establish a baseline of normal activity and alert on anomalies in real time, it shifts your team from manual, reactive log-hunting to automated, self-healing data defense.

What do you like best about the product?

Data classification engine is very useful

What do you dislike about the product?

Sometimes support can be slow with MDDR responses

What problems is the product solving and how is that benefiting you?

We are able to quickly label our data

What do you like best about the product?

MDDR gives us piece of mind 24/7 and the extensive logs

What do you dislike about the product?

Occasionally we have to submit feature requests

What problems is the product solving and how is that benefiting you?

Allowing us to see in depth logs on all our user and data activity