Stacklet Governance-as-Code Platform

What do you like best about the product?

Real time enforcement of security policies across all the cloud environments. Provides the security by reducing the risks by centralizing the governance. Also, provide the historical revisions and dashboards for tracking purposes.

What do you dislike about the product?

I think the biggest missing part from Stacklet platform has been lack of compliance frameworks. Whenever we talk about data governance, there's always talk about different compliance frameworks but it looks like there are not many frameworks currently available at this time.

What problems is the product solving and how is that benefiting you?

1. Real time business security policies.
2. Achieving data governance across all the platforms.
3. With different laws coming out, it helps in achieving CCPA and GDPR.

What do you like best about the product?

Reasons why I like Stacklet

-Open-source policy language - Our engineers already use Cloud Custodian (c7n). Hence, they can easily add their own policies or adapt the pre-written c7n policies provided by Stacklet.
-Scalable - Stacklet makes it easy to deploy across hundreds of accounts
-Connect to Jira - Policy violations can be posted to Jira (or Slack) which our Engineers use to manage their work
-Cloud asset database - SQL-friendly cloud asset database makes it easy for our engineers to query resources or user visualize them with BI tools

What do you dislike about the product?

The user interface could be more user-friendly.

What problems is the product solving and how is that benefiting you?

Stacklet is helping manage our cloud policies, monitor cloud resources and identify savings opportunities at scale (across hundreds of accounts).

What do you like best about the product?

Stacklet brings the best of Cloud Custodian compliance policies within manageable reach of even the most disparate and large organizations. With Stacklet, we can automate compliance checks for any of our cloud environments, along with auto-remediate any of our findings without requiring any human interaction. Compliance checks are easy to create and are well documented. Actions taken upon findings can range from as simple as record findings in a database, to sending notifications (email, IM bot messaging, ticket generation), to making a cloud provider API call to correct the setting, to custom calls to fit your unique desires. Stacklet also provides access to a database of most cloud resources defined, allowing for answers to most cloud platform questions easy to answer, as long as you can envision the SQL query. In addition to the above product portfolio, I truly love the fact that Stacklet is tightly bound with the cloud custodian community, with each team improving core aspects of the compliance policy execution framework. Stacklet's add-on of management tools and assetdb make the community offering something which is manageable with minimal effort, no matter how complicated out environment may be.

What do you dislike about the product?

Stacklet is a younger company that is still maturing their offerings. This has meant that I may need a newer feature which has not yet been coded up. In my experience, this had meant that I may need to wait a few months for most of my new feature requests. On the flip side, this has been beneficial for me in the long run as more established/older companies have a track history of equating lack of current features with a lack of desire to address my new requirements on any timeline.

What problems is the product solving and how is that benefiting you?

Stacklet provides an easy framework to take audit requirements in the morning, have policies and remediation actions in place by lunch, and immediately turn over to my operations team. When operational questions come up, Stacklet's assetdb allow us to immediately provide the answers we're looking for so we don't need to waste time assessing our environment.

What do you like best about the product?

Constant addition of features.
AssetDB for querying
Great support team.

What do you dislike about the product?

Have not found any issues in working with the stacklet platform.

What problems is the product solving and how is that benefiting you?

The Stacklet Platform is a simple solution to our multi-cloud governance and compliance needs.

What do you like best about the product?

Policy management is flexible and customizable so we can enable what is correct for our needs. The APIs are easy to use so integrating to our other tooling is straight forward.
The Stacklet team's support is very good. They are collaborative and very interested in our success.

What do you dislike about the product?

The platform is still evolving, so there are some nice-to-have features yet to be implemented.

What problems is the product solving and how is that benefiting you?

Our organizational governance needs to mature. Additionally, we are transitioning from a vendor-supported operational model. Stacklet is enabling us to take control of the cloud security compliance in-house and make it better.