Veriato solutions are excellent products for detecting and mitigating employee threats.
Pros
The software is very affordable compared to similar products on the market that are quite expensive. The user interface is easy to navigate, and the information provided on potential employee threats is outstanding. I provide training and consulting services related to Insider Threat Programs, and Insider Threat Mitigation (www.insiderthreatdefense.us). I have recommended Veriato Recon and Veriato 360 to my 500+ clients. Many have purchased Veriato products and are quite please with both products.
Cons
I cant find anything I don't like about Veriato products. As part of my consulting for my clients, I review various employee threat detection tools and make recommendations. Veriato products are my # 1 recommendation to my clients.
Rating breakdown
Likelihood to recommend: 10/10
While the initial motivation for installing this system was to get evidence of an employee exfiltrating company data, we use it most often to ensure that people are being productive and not doing unauthorized things. We had a ransomware infection incident a couple years ago, and Veriato 360 captured the source of the user action that started it, recording his opening of a junk email and clicking through two subsequent warnings before launching the infected attachment. That information was priceless. As an software developer of internal applications, I have also used it to investigate bug reports from users. On a couple of occasions, users swore they did something one way but the screen shots and keystroke logs said otherwise. Objective evidence has saved me a lot of time fixing something that wasn't broken. As I described in my "like least" list, the recorder sometimes stops getting web site data. By recording multiple data streams, you can get what you need even if some data is not available (e.g., if web site recording is not present, window titles will probably let you find what you are looking for, and screen shots show what the user saw; if "Online Searches" data is not recorded, keystrokes into the browser can provide the data). There are tons of features that I have not used. It can send alerts on keywords detected in the data. It can display graphs of usage sliced in different ways. There is a recorder for Mac. I can't comment on how well they work.
Pros
Veriato 360 can capture just about any information you can think of from user sessions - web sites visited, emails, instant messages and chat, files transferred and printed, keystrokes, and screen shots, and network data summaries.
- It is easy enough to navigate, even if you don't use the system that often.
- It can export data to spreadsheets, text, html, and xml files for further analysis.
- It can block selected web sites.
- Captures all monitors in screen shots
- Client systems can buffer up data for weeks while they are out of contact with the server (or when the server is down), e.g. remote laptops and systems that only connect by VPN once in a while.
- Operation is generally invisible to users if you want it to be stealthy.
- Tech support is helpful.
- Users can be created to allow limited access to browse the collected data, for example to let managers review their assigned employees.
Cons
It takes a fair amount of effort to keep the system working.
- Frequent client recorder updates are required to keep pace with web browser updates. When browser updates get ahead of the corresponding Veriato updates, web site recording stops.
- Updates are often trapped by anti virus software like Windows Defender until IT staff updates the exclusion lists and deploys them (e.g. by group policy). We have to do that ourselves.
- The system sometimes fails to start all the services required to collect data from the client systems, and getting it working again may take fiddling with service start delays and calls to tech support. At least the client systems buffer a lot and tech support is reasonably responsive. I have to periodically check that the system is working.
- The amount of history you can record is limited by what fits in a SQL Server Express database (10G; screens shots are stored as separate files) unless you have or buy a SQL Server license.
- Sometimes the recorder drastically affects client programs. We have had to disable email recording on only one or two systems where Thunderbird suddenly became unusably slow. On dozens of other systems it works fine - go figure. We had one conflict with a camera application that had to be resolved by sending a camera and software to Veriato so they could observe the problem and develop a fix.
- No Linux support. Microsoft's Windows 10 updates have been so unreliable this year that I'd love to switch, but I need recording...
Rating breakdown
Likelihood to recommend: 8/10
The features presented by Veriato are great but some work and some don't at random. Be ready to go through a painful process. I loved the idea of installing clients over network for after hours but found that a large percentage fail or worse, completely mess the OS on the machines. I had this happen on the laptop of a Director for the company... not the greatest of times. Now I'm afraid to install the clients on machines. Another issue is licensing, you cannot change a computer name without having to re-install the client, this uses yet another license. You cannot reclaim licenses yourself, you actually have to call in their support and given them the specific names for the licenses you want to reclaim, Painful. If they worked these and more issues, the premise of the software is great. I hope that they work out all these issues out to have a product that lives to its full potential. I do want to point out that I use On-premise instead of their online offering, maybe their cloud service has less issues.
Pros
It is loaded with a lot of features , On-Premise solves my concern with data security.
Cons
It is painful to use, have to dig through tons of reports to get what you need. GUI not user-friendly and not intuitive at all. Installing on clients over network is a hit or miss and pretty much requires you to cross your fingers.
Rating breakdown
Likelihood to recommend: 4/10
Does NOT work as described. Described functioning of software is ALL IN THEORY. I've called to help with setup more than once before I gave up. They take you through a few steps, and tell you what to do for the next few because they are impatient to help through the whole setup. When setup fails you call back and same process. That's happened 4 times before I gave up. 2 year license I still can't get working. -- Each time you call up the tech is VERY KNOWLEDGEABLE (I'll give them that), but they get off the phone once you wake them up from sleep (TWICE it sounded like they just rolled out of bed and were walking through the house, doors closing etc..) and with all that my system is still not working. After 2017 I decided not to renew because of the setup issues (never worked) and I was convinced again by sales they would help with entire setup, I shouldn't have issues, I'm sorry, etc.. 2018, same problem 4 calls to tech support setup. still not working on ANY system (we have 4 PCs to monitor in our office). BTW, they have to call you back for support, It hasn't been convenient to continue on to a 5th tech. We have used the old version spectorsoft for years, hate the new one. be warned.
Pros
the features of the software are still there,
In THEORY, the features are great for a networked office, it attempts to work correctly, it logs just about everything.
Cons
sales - excellent they will work a million ways and contact you the same amount of time till you make payment.
software setup - terrible! beyond terrible.
customer support for setup - worse..
Rating breakdown
Likelihood to recommend: 4/10
I really like the alerts based on behavior anomolies. Something hard to track without consistent user data.
Pros
Very feature-rich, excellent support. Alerts based on behavior anomolies, keywords, data movement, malicious program, and many more. Screenshots are viewable for all users. Very robust product.
Cons
Older versions have had recorders fail on us. Not easily deployed remotely.
Rating breakdown
Likelihood to recommend: 8/10
Australia (English)
Canada (English)
Deutschland (Deutsch)
United Arab Emirates (English)
España (español)
France (français)
Ireland (English)
México (español)
Nederland (Nederlands)
New Zealand (English)
Österreich (Deutsch)
Portugual (Português)
Singapore (English)
South Africa (English)
United Kingdom (English)