Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Clone Systems Security Operations offers a comprehensive managed security service that features continuous analyst monitoring paired with the vendor's exclusive SIEM and endpoint detection and response capabilities. This service gathers logs and telemetry from various sources, including servers, endpoints, cloud platforms, and network devices. SOC analysts utilize analytics and threat intelligence to examine and prioritize events, inform customer teams, and assist in containment and remediation efforts. The offerings encompass managed SIEM, log collection, incident reporting, and a dedicated customer dashboard to track SOC activities. Additionally, optional AI-driven triage and incident summaries can enhance the service experience. Aimed at mid-market clients like financial institutions, healthcare providers, and e-commerce or cloud-native teams, this service allows organizations to benefit from around-the-clock monitoring without the need to maintain an internal SOC. The pricing structure is determined by the number of monitored endpoints, starting with a minimum of 50 endpoints to ensure effective security management. Furthermore, the service is designed to adapt to the evolving threat landscape, providing organizations with peace of mind as they navigate their digital environments.
Description
Rapid7 Incident Command is a cloud-native, AI-powered SIEM built to replace legacy security monitoring tools. It unifies attack surface visibility, telemetry, and risk context to give security teams a clear, real-time understanding of threats. Incident Command applies advanced behavioral analytics and AI-driven triage to reduce false positives and prioritize critical incidents. The platform enriches alerts with vulnerability data, exposure scoring, and threat intelligence so analysts know exactly what to address first. Natural language search enables rapid investigation across massive volumes of security data. Incident Command correlates activity across users, endpoints, applications, and networks to reveal full attack paths. Automated SOAR workflows allow teams to isolate systems, revoke credentials, and contain threats quickly. Integrated digital forensics and incident response capabilities support deeper investigations. The platform is designed to scale across complex hybrid environments. Rapid7 Incident Command helps SOC teams detect faster, respond smarter, and operate more efficiently.
API Access
Has API
No
API Access
Has API
No
Screenshots View All
No images available
Integrations
Armis Centrix
No
Carbon Black EDR
No
CnSight
No
CyCognito
No
Cylera Platform
No
Delinea Cloud Access Controller
No
Google Digital Risk Protection
No
Imperva DDoS Protection
No
Imperva WAF
No
Intellicta
No
Integrations
Armis Centrix
Yes
Carbon Black EDR
Yes
CnSight
Yes
CyCognito
Yes
Cylera Platform
Yes
Delinea Cloud Access Controller
Yes
Google Digital Risk Protection
Yes
Imperva DDoS Protection
Yes
Imperva WAF
Yes
Intellicta
Yes
Pricing Details
Plans are scoped to monitored endpoints, with a 50-endpoint minimum. 24/7 analyst monitoring and managed SIEM are included; the AI assistant is an optional add-on.
Free Trial
No
Free Version
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
Yes
Vendor Details
Company Name
Clone Systems, Inc.
Founded
1998
Country
United States
Website
www.clone-systems.com
Vendor Details
Company Name
Rapid7
Founded
2000
Country
United States
Website
www.rapid7.com/products/siem/
Product Features
Product Features
Endpoint Detection and Response (EDR)
Behavioral Analytics
Yes
Blacklisting/Whitelisting
No
Continuous Monitoring
No
Malware/Anomaly Detection
Yes
Prioritization
No
Remediation Management
Yes
Root Cause Analysis
No
Incident Response
Attack Behavior Analytics
No
Automated Remediation
No
Compliance Reporting
No
Forensic Data Retention
No
Incident Alerting
No
Incident Database
No
Incident Logs
No
Incident Reporting
No
Privacy Breach Reporting
No
SIEM Data Ingestion / Correlation
No
SLA Tracking / Management
No
Security Orchestration
No
Threat Intelligence
No
Timeline Analysis
No
Workflow Automation
No
Workflow Management
No
Network Traffic Analysis (NTA)
Anomalous Behavior Detection
No
High Bandwidth Usage Monitoring
No
Historical Behavior Data
No
Identify High Network Traffic Sources
No
Network Transaction Visibility
No
Stream Data to IDR or Data Lake
No
Traffic Decryption
No
SIEM
Application Security
No
Behavioral Analytics
Yes
Compliance Reporting
No
Endpoint Management
Yes
File Integrity Monitoring
No
Forensic Analysis
No
Log Management
Yes
Network Monitoring
Yes
Real Time Monitoring
Yes
Threat Intelligence
Yes
User Activity Monitoring
Yes
Alternatives
No Alternatives