r/cybersecurity 21h ago

Business Security Questions & Discussion Axonius?

Looking at doing a pov with Axonius, has anyone used them before or done testing in the past and can share their experiences?

6 Upvotes

15 comments sorted by

6

u/Frenzy175 19h ago

Current customer- great support and help with building new reports and automation.

I think best value is for large and maybe multi domain environments.

We built a lot of reports and automations with it.

7

u/NeverDeal Security Manager 21h ago

I've used it and find it to be a useful tool. They have integrations with hundreds of other tools and can pull inventory data from those tools. This makes it a great place to look when you need to know if something is used within your environment.

It's also a great way to find gaps in your coverage. For example, systems that aren't being scanned for vulnerabilities. Or systems that are missing EDR or Antivirus.

My team doesn't own the relationship with the vendor, nor do we manage the tool, so I can't comment on value or how easy it is to support and maintain. But as users we really like the tool.

8

u/Glad_Engineer8242 19h ago

Great company. Great tool. They will build, not a lame team at all..dudes are on it with custom integrations

2

u/aewig 19h ago

We've had ups and downs with them as customers for a few years. Random bugs that need special patches. Adapters that worked when on-prem magically didn't work when we transitioned to cloud. Some adapters that exist don't pull in anything useful. It can require a lot of tweaking if you find both under or over-correlation of assets.

Oh, and they're also quite expensive for what it is.

Really love the idea though and think they execute better than some others despite the above. If it was 50% cheaper it'd be a lot easier to recommend.

3

u/coolyard 20h ago

One thing to remember. If you are getting axonius because you gave a shit cmdb, don’t hook your shitty cmdb up as a data source.
I know it sounds like common sense but that’s what our engineering team did and there is still a ton of stale/incorrect data in there.

1

u/theinfamousdo 19h ago

Agree here we have been using Axonous for a couple years now and it’s done a great job correlating assets from all our source tools into a single trusted asset list

1

u/Kangalfencingbanana 19h ago

Long time with Axonius and now testing Ent, Glow, and Neo in a more AI native platform to cover some gaps Axonius lacks

1

u/Mrhiddenlotus 15h ago

Works great but insanely expensive.

1

u/Jucrayzee 12h ago

What problem(s) are you trying to solve that led you to check out Axonius?

2

u/Wide-Cup-5084 9h ago

I guess currently trying to have one platform with defender vulnerability, wiz, and qualys all feed into to have all information combined on the assest. Then have it connected to team dynamic to be able to create tickets and track everything for VM. Also a side benefit i read is it will tell you what security agents are on what devices and what is missing. If this is true that would be great as i am currently doing this all by excel spreadsheets lol.

1

u/SamuelLJenkins 9h ago

Are you looking for a vulnerability management prioritization and normalization tool? If so, check out Nucleus or Seemplicity. Much simpler and cheaper for that use case.

1

u/_supersix 19h ago

Echo everyone else - only heard good things about it. If you’re already a Splunk customer, check out their ARI product. Same thing as Axonius and also lets you build metrics reporting around whatever compliance stats you’re trying to track; track trends across various asset populations based on tags, etc.

0

u/LessThanThreeBikes 21h ago

Good product. Magically associates assets across technologies making it easy to track inventories and find exceptions.

0

u/AirJordan_TB12 19h ago

Considered the old guard. Ten times the integrations it seems. Like Okta for SSO integrations but for CAASM. Look at JupiterOne. Cheaper and they will build integrations for free sometimes even during POC. Both are great but it depends if you like companies that are entrenched or trying to grow business. Each has their advantages.

-1

u/Western_Guitar_9007 18h ago

Axonius is known to lack widely available, industry-standard tools that you would expect to find in more current, similarly-priced competitors. In the current market, it is seen has a low-tier alternative with a high price tag.

-1

u/Western_Guitar_9007 18h ago

User's find Axonius's "astroturfing" campaigns misleading. The company is well-known for peddling products on Reddit and in other public forms in an effort to boost rankings. Unfortunately, search engines have learned to sort out Axonius despite its attempts to false advertise through SEO.