Swimlane Turbine Security Automation
SwimlaneExternal reviews
48 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Integrations Galore
What do you like best about the product?
I'm especially impressed by its seamless integration capabilities and the customizable dashboard. Support is awesome, Easy to implement simple integrations.
What do you dislike about the product?
The workflow pages can seem cluttered and hard to navigate when it gets complex
What problems is the product solving and how is that benefiting you?
Swimlane is solving many problems to help elminate manual tasks that will free up analyst time to accomplish other things.
Unlimited Security Automation
What do you like best about the product?
Swimlane is extremely easy to learn and the low-code automation allows for seemingly endless automation opportunities across the entire security landscape. The Swimlane platform can integrate with any tool or IT product to enchance the business and provide security monitoring.
What do you dislike about the product?
Swimlane's UI could use some work. It needs a refresh to look less bland and given a more modern look.
What problems is the product solving and how is that benefiting you?
Swimlane automates repeitive tasks and save Security Analysts tons of time so that they don't have to spend all day doing manual tasks. Alerts can be automatically enriched with threat intelligence information from multiple platforms giving users better insights. Automated Incident Response actions provide instant remediation to stop threats as soon as they happen.
Powerful Automation with Swimlane
What do you like best about the product?
Swimlane provides us with a comprehensive view of our entire toolset. With Python, we can creatively brainstorm solutions to problems that were previously unfeasible without the flexibility Swimlane provides. This enables us to respond quickly to various operational issues, compliance problems, and security incidents.
What do you dislike about the product?
We utilize the original Swimlane Platform, which is built around Python. To leverage Swimlane to its fullest potential, having a Python developer to assist with implementation and customization is recommended. While Swimlane offers out-of-the-box integrations, tailoring them to your specific needs is necessary. Swimlane provides professional services to assist with it all. It's worth noting that Swimlane Turbine is a low-code solution that isn't dependent on Python development experience.
What problems is the product solving and how is that benefiting you?
High Mean-Time to Resolution Metric (MTTR):
The primary goal we achieve with Swimlane is the reduction of the Mean-Time to Resolution metric. We can efficiently bring in detections, correlate them into incidents, identify and enrich organizational assets, enhance indicators of compromise with both open and closed-source threat intelligence, address alert tuning requirements, and respond to and remediate incidents when required. By consolidating all relevant information in one place for our analysts and eliminating the need to switch between multiple tools, we effectively reduce the Mean-Time to Resolution metric. This solution addresses several challenges encountered in our Security Operations Center, including dealing with alert fatigue, reducing user errors with data entry, and accelerating the resolution of incidents.
Synchronizing our Alerting Toolset:
When an incident is closed out in Swimlane, it automatically closes all alerts associated with the incident generated by their respective tools. This automation reduces the need for manual intervention and ensures our toolset maintains accurate information. For senior leadership, this provides accurate vendor-specific dashboards based on different tool-specific metrics. For our analysts, it provides a method to locate incidents in Swimlane based on comments left in other tools.
Synchronizing our Threat Intelligence:
When actionable threat intelligence becomes available, we utilize Swimlane to synchronize indicators of compromise with our toolset. This proactive approach detects and prevents activity in our EDR, NDR, SIEM, ESG, etc., based on findings from our own incidents as well as open and closed-source threat intelligence providers. Our analysts can focus on the current alerts and incidents rather than manual tasks like updating lists of indicators.
The primary goal we achieve with Swimlane is the reduction of the Mean-Time to Resolution metric. We can efficiently bring in detections, correlate them into incidents, identify and enrich organizational assets, enhance indicators of compromise with both open and closed-source threat intelligence, address alert tuning requirements, and respond to and remediate incidents when required. By consolidating all relevant information in one place for our analysts and eliminating the need to switch between multiple tools, we effectively reduce the Mean-Time to Resolution metric. This solution addresses several challenges encountered in our Security Operations Center, including dealing with alert fatigue, reducing user errors with data entry, and accelerating the resolution of incidents.
Synchronizing our Alerting Toolset:
When an incident is closed out in Swimlane, it automatically closes all alerts associated with the incident generated by their respective tools. This automation reduces the need for manual intervention and ensures our toolset maintains accurate information. For senior leadership, this provides accurate vendor-specific dashboards based on different tool-specific metrics. For our analysts, it provides a method to locate incidents in Swimlane based on comments left in other tools.
Synchronizing our Threat Intelligence:
When actionable threat intelligence becomes available, we utilize Swimlane to synchronize indicators of compromise with our toolset. This proactive approach detects and prevents activity in our EDR, NDR, SIEM, ESG, etc., based on findings from our own incidents as well as open and closed-source threat intelligence providers. Our analysts can focus on the current alerts and incidents rather than manual tasks like updating lists of indicators.
Overall intuitive platform for case management and automation workflow.
What do you like best about the product?
Ease of use once you are somewhat familiar with the product. Custome applications allow integration with many tools within your environment. Migration and backup tasks are straight forward wiht no issues,
What do you dislike about the product?
Support is sometimes slow to respond. Also had issues with upgrades/pdates failing requiring engineers to diagnose issues.
What problems is the product solving and how is that benefiting you?
Case management for Incident Response. Also helping us with security response actions, cutting down the time our analysts take to espond.
The best Python Runspace
What do you like best about the product?
Place for all my python scripts and basically a database that you can run ad hoc python tasks as you see fit.
What do you dislike about the product?
No preprocessing of alerts and or incoming data.
What problems is the product solving and how is that benefiting you?
Automation of alerts from multiple sources to one source of truth.
Security automation is the way
What do you like best about the product?
It's a 'when there's a will, there's a way' type of product. What you want to achieve can be done using it. We use it to automat repetitive tasks, perform automated rapid response on security alerts and incidents, and centralize majority of security operations through it. It saves a lot of time and hours for us.
What do you dislike about the product?
There isn't much we dislike about it except for update/upgrade process. It's a bit more involved than other products where you just click on upgrade and you are done. But this is just a very minor dislike.
What problems is the product solving and how is that benefiting you?
We are a small team and not stuffed 24/7. Swimlane saves us hours since we are able to automate a lot of processes that would otherwise consume a lot of our team's time. We are also able to rapidly respond on security alerts through automation as well. The time between discovery and response gets cut down to minutes when it comes to certain alerts/incidents.
Working with the swimlane team has been an amazing experience
What do you like best about the product?
I like the versatility and the swimlane staff have been great to work with.
What do you dislike about the product?
I dislike how each input needs to be a record. I wish you could have data within a record without needing to create a seperate application to hold that data.
What problems is the product solving and how is that benefiting you?
We were able to automate many activities for a client.
Great product and team
What do you like best about the product?
I like that it gives you the capability to develop your own solution and the customer success team is great.
What do you dislike about the product?
Marketplace is outside of Swimlane itself
What problems is the product solving and how is that benefiting you?
Swimlane solves the problem of taking all alerts and performing automation to provide to analysts into our ticketing solution. It saves them time on alerts and mundane tasks.
Swimlane -- Very Flexible SOAR Tool
What do you like best about the product?
The flexibility to create a playbook easily and able to easily integrate with all the integrations with the prebuilt plugins.
What do you dislike about the product?
Since the product is new in the market, there are very limited resources online. Other than that I give it a thumbsup!!
What problems is the product solving and how is that benefiting you?
Automating the incident response, Ip blocking, vulnerability scanning etc., Manual block of IP involves multiple people doing the manual work on Firewall servers, using Swimlane we automated it and blocking the ip within 20-40 mins.
Make Your Life Easier!
What do you like best about the product?
One of a kind! I really like to work with Swimlane, because it is not so common anymore that you have a proper product and a team behind it. Well done and I hope they will stay the same.
What do you dislike about the product?
So hard I try to find any dislike but I cannot find it to be honest, I could say price compares to SIEM solutions, but still overall the SOAR solution is not cheap.
What problems is the product solving and how is that benefiting you?
It makes our life really easier, because integration with existing solutions is smooth and all the playbooks behind it makes the use of our SOC much faster and better.
showing 11 - 20