Perch Security Erfahrungen

Set up is very easy. Perch also continuously releases support for 3rd party API integration so you can centralize logs from several sources. Their network sensors take in data from various feeds (like FS-ISAC) to look out for trending indicators of compromise in your business sector. Web interface is very intuitive and clean.

Couple times I've had to power cycle network sensors because they go offline. They come right back up after that.

Customer service is top-notch and the community is probably the biggest selling point. To be quite honest they have built a tool that anyone could build but they are selling the community and their willingness to continue to improve upon their tool. Their team has been incredible to work with and has been a shining light in the community in terms of continuing to improve and thought leadership.

The price is the only issue and it's really actually a competitive price.

From day 1, we always were drawn to the flexibility and functionality of the software solution.

Frankly, for our customers, the price is the biggest hurdle. While this solution does so much, our customers don't always see the value.

We specialize in Cloud/office 365 and serverless environments so it's important for us to have a solution that met these needs.

We feel that the SLA can be more competitive.

Deployment is fairly easy. Perch does a great job getting you started. They are also a great help in monitoring and sending us actual events we should look at.

The product is very comprehensive. Perch does not want to over-reach with their service, but it would be good if they conducted a more thorough review of our first deployment with us, we may have caught some misses a lot sooner.

Ease of use, community, and support. Top notch all around!

For a novice to perchybana, custom searches can be difficult

MSP focused company. Good UX. Monitor multiple sources. Per user pricing.

Not clear what the best practices are...
Support via Slack - it works but it is a pain.
Pricing structure always seems to be changing
It has gotten A LOT more expensive over the last 18 months
Worried about support being owned by Connectwise :(
Good sales resources (marketing info)

The customizability and freedom in generating reports. It will also accept log data from almost any data source and the support team is awesome in assisting with the ingests and walking through every request, no matter how crazy it might be.

The sensors can be a little tricky to set up.

It works well, has great integration support, easy to deploy and manage, and the company is great to work with and provides awesome support.

Nothing really comes to mind. If I had to say one thing, the web interface can occasionally get slow, but that is generally only on larger queries and has improved.

Setting up the product is quite simple and straight forward. The information provided and the human element of the Perch SOC team make this a one-stop-shop when it comes to SEIM /SOC solutions!
The Connectwise and many other integrations make ticketing simple and clean.

If you are not fluent with Linux, there will be a bit of a learning curve. Filtering data in the Perch console requires an understanding of KQL (Kibana Query Language).

The hardest part of implementing most SIEM's is building the SOC - Security Operations Center/the people who monitor the software so that you actually get he value from the investment. Perch solves this problem for companies so that they don't have to hire people, train them, and then manage and keep them. Instant value.

I wish this tool had a better way to scale to large and enterprise accounts. I see this getting expensive for large companies.

MSP friendly threat detection. This space is filled with solutions designed for large enterprises, which is out of reach for a lot of typical MSP customer sizes and budgets.

Perch is able to take a lot of the same technologies used in those enterprise solutions, make them affordable and easy for MSPs to use.

Alerting when things stop working. When things flatline, there's nothing configured out of the box that will notify you.

customer support/noc interactions are fantastic. everyone is super knowledgeable and always willing to help. it does not matter what it is you need help with. it could be designing a query or dashboard to help finding a specific record.
Also the constant improvement to the platform is great.

honestly at this time I can only think of a single item. and a change request has been submitted for it so I'm sure it will happen in the future. currently you can only connect to a single instance of Salesforce to collect logs. so if you have multiple instances you cannot collect all the logs.

Perch has enabled us to get all of the information about potential breaches into one place backed by a top tier set of experts who help us decipher it all. Our team has built an interactive relationship with the Perch team and our clients are thrilled that we are finding potential issues before they become breaches.

When we chose Perch to deploy to all of our managed clients, our initial deployment was a challenge. We expected this to be a smooth process led by the Perch team and that is not what we experienced. I believe that they have resolved some of these issues as recent deployments have gone more smoothly but when something wasn't working properly and they found the issue, it was typically a configuration issue that we never could have know needed to be done in a tool that we had never used. More guidance in this process would have been appreciated.

The community aspect. All SIEM resources, threat intel, suppression notes, alert comments, can be shared globally or restricted to your desired level. Additionally, this solution seamlessly combines NDR and SIEM into one slick easy to use and navigate solution portal. This makes life as a security professional monitoring and administrating this solution much easier than alternatively having to navigate and correlate information from two separate solutions.

The lack of developer support. This solution has what feels like infinite potential. However, that infinite potential feels squandered due to the lack of developer support and action. Feature requests often go unnoticed. Core functionality bugs are landmines for new users that do not know how to navigate them effectively.

Perch integrates with most of our technology stack, allowing us to collect log and event information, and create actionable alerts when anything suspicious happens.

The user interface needs some re-organization since so many new integrations have been added since it was designed.

This SIEM was easy to use as a MSP, allows for multitenancy.

The product is built on Elastic, which is very powerful, but has a learning curve for searches.

Honestly the entire SOC team in Houston is the best part of about working with Perch. Any questions are quickly answered, any events found are quickly visible / communicated, and the integrations with our systems were seemless.

I dont know if its a really a con, but the small learning curve would be it. However Perch was helpful through all the onboarding and calls to ensure it was the best it could be.

The ease of general use - everything is just simple to do without any extra steps, crazy setup, etc...

Speed of the platform overall - some days, it drags hard.

Single pane of glass, all the integrations with most commonly used industry applications. The knowledge and experience of the team driving the solution.

The complexity of use, huge learning curve to manage, learn and understand the application.

Easy of implementation and the setup of the appliances at each location is great. The web portal reduces our overhead and maintenance cost.

Query of information via Perchbana needs to be segmented by client sites.

The Perch solution has a very community-esque feel. Users of Perch love it and are not afraid to support one another, share tips, tricks, customizations, etc. This collaboration and feedback is also present within Perch and the improvements that are made to the product it reflect the users' requests and needs.

This is a product where the more one puts into it, the one gets out of it. It is no magic system out of the box per se. This is not really Perch's fault, but to the layperson, one could thing that.

pricing is very attractive at first but then it adds up very quickly. It doesn't scale very well.

Log retention is a problem. We failed an audit because didn't provide the raw logs for the duration that we needed it. Perch is a simple basic alerting that sometimes fails to alert.

The product is comprehensive. It touches the network, the individual hosts and cloud based resources. It all aggregates into a very flexible and feature rich SIEM or SIEM like tool that helps us really figure out what is going on.

When we first engaged with Perch they had not yet completed some key integrations. Those have been completed now. I can't really think of a current limitation that we wish were better. We are very happy with the product.

Ease of sales with account managers
Ease of set up and configuration
Continual development of API

No - nothing that can come to mind, they have been very easy to work with