CloudGuard (Dome9) is one of the best tools in his space, CloudGuard (Dome9) Support all Public Cloud. From a single console, we can able to manage the entire Cloud Security Posture. It supports all cloud areas (Infrastructure, Native Services, Serverless Architecture, Kubernetes, IAM, Network, etc.) A set of predefined policies according to different compliance is one of the best features. Support of Serverless Architecture is a good feature. Reports alerts and integration is also Good features.

All Features are good, but some of the features are in the development/beta stage, which I hope to release soon.

I strongly recommend using Dome9 as a security posture for the cloud as it eases the administrative overhead.

It solves all Cloud security issues. In the cloud, it is challenging to identify the issue or breach area as a single account spread across various Geo locations. Administrators need to log in separately on each account to manage security stuff, but after implementing Dome9, it is easy to operate. Reduce Administrative overhead.

Gives more visibility on all cloud workloads and services, it will also help us on covering the compliance requirement

Sometimes portal access is prolonged, and reporting functionalities to be improved.

With the single dashboard, we can get the total cloud assets covering the current security posture of every cloud account.

CloudGuard Posture Management identifies weak points across the networking channel that can be easily compromised and provide quick solution. We deployed this product to provide full view of the workflows while implementing projects and tasks.

I have not disliked anything from the performance of this product. It has enhanced achievement of set objectives.

Integration and configuration of data security systems has been the main aim of deploying this product. We have complied with the set organization set prevention obligations. This software has given employees freedom of innovation and discovery of new techniques of improving production without any drawbacks mitigated by data insecurity.

It provides provides insights on work processes that takes place from our cloud servers. Data compliance has been fully achieved since we deployed this product across our organization. It has enhanced effective security across all the applications.

Security around our cloud environment have been fully equipped since we deployed this product. There is no poor recorded performance.

CloudGuard Posture Management monitors assets and workloads stored in our cloud storage space effectively. It offers advanced analytics and detects misconfigurations with suitable solution. It has deployed modern security models across the entire organization networking infrastructure.

If your organization leverage compliance frameworks than this cloud monitoring tool is one the best tools out there right now. The compliance rulesets are extensive for AWS. Azure and GCP are covered too by NIST, PCI, GDPR, etc. It recently introduced Kubernetes monitoring as well but needs more ruleset additions. The tool continuously monitors cloud accounts every hour. Out of the box, it has a nice UI illustrating your trust boundaries as it analyzes your network security groups. Additional paid features include ingesting traffic flows for analysis and near real-time detection/alerts. My company performed POC with other leading cloud monitoring vendors and Dome9 stood out to be the fastest in ingesting cloud environment changes. The SaaS tool also included many out of box features we needed across the enterprise. The pricing and yearly subscription model was also more reasonable based on the protected assets like VMs, RDS, etc.

-When vendor managed rulesets are updated, your custom exclusions rules are invalidated. You must go back in to reapply your exclusion rules. -Minimum support on bots. Auto-remediation bots have not been updated for more than 2 years. -No access to remediation logs from dashboard to detect failed remedations. -No merging of custom rulesets back to baseline template -No individual cloud account billing/reporting in Enterprise plan (for chargeback internally) -There is no mechanism to change the continuous monitoring to a longer duration or to turn it off for a specific cloud account. -Serverless scanning (Lambda/Functions) requires additional "agents" installed on your Cloud IaaS, versus using API to scan.

For the most part CloudGuard CSPM (Dome9) still functions as it was originally designed but many flaws (see below). Its rule engine needs a revamp since it is limited to many of the features available today in CSPM 2.0. I would look elsewhere if you need full compliance ruleset management and auto-remediation. There are many other CSPMs available now that cost less with the similar or moe features.

- increase security posture for enterprise cloud computing - visibility to shadow IT - able to offer GRC (i.e. compliance standards) to cloud hosting across the enterprise

Having a total and unified control of the security posture of the infrastructure deployed in different clouds

It is a complex service to integrate, especially at the beginning

Before starting it is necessary to think about what is really needed

Know the security status of the cloud infrastructure deployed by several departments of the company. Have a quick and up-to-date view of the security status of the entire infrastructure deployed in various clouds.

Dome9 as compared to prisma and other is quite best and competitive. Its cloud bot features with cloud monitoring is quite good. Dome9 provides various other functioalities like: Posture management where we can identify manage and prioritise contents.

In Dome9 as for now the only dislike is pricing. Other than that it is outstanding and is available for any type of cloud environment.

We are able to check cloud infra and do automations using CloudBots in AWS and Azure. Create reports and view topologies and IAM access utilisation is also good. In IAM using timely identity and access response we can give dedicated access to particular users for the cloud also to limited sets of services for a particular time. Dome9 Also provides PIM/ PAM solution.

CloudGuard Posture Management performs routine health checks in our multi-cloud platforms for proper cloud compliance in regards to the enterprise standards and customer policies. It provides fantastic ruleset definitions which we can run in any of our cloud platforms, whether it's AWS, GCP, or Azure. It offers comprehensive notifications, which are highly useful for detecting issues in our client environment, and test results and summary reports in detail can also be exported from its Dashboard.

CloudGuard Posture Management has all the necessary features which are sufficient to comply with my organization's standards for our AWS, GCP, and Azure platforms. We can conveniently access and manage our cloud resources in all cloud platforms from a centralized management utility. There are no dislikes in my perspective about CloudGuard Posture Management cloud security solutions.

Primarily CloudGuard Posture Management acts as our Unified platform for cloud-native security solutions. It manages our workloads, resource security, and threat prevention across our multi-cloud deployments. It offers exceptional visibility of our organization's compliance in its intuitive dashboard which makes it quick & easy to overview our security & compliance postures. Also, it reduces network complexities by limiting the need for traffic translation and sends email reports and alert notifications through AWS SNS Topics or HTTP endpoints.

Powerful tool that shows us the anomalies Keep the perimeter of the cloud safe Easy to manage with all the cloud platforms

It's not a cheap, complex service to integrate

keep our clouds safe

One of the best solutions that cloud guard can have. we can monitor all the activity from all endpoints

The only thing that I dislike is the limitation of integrating this solution with any 3rd party systems

The protection that we have on the cloud solutions.