ABCEFGHIJKLMNOPQRSTUVWXYZ
1
LegionSubcategoryVendor answer
2
Demonstrated efficiency improvements MTTR lowered by up to 90%. 89.15% improvement in MTTR based on available case studies, 93% false positive reductions.
3
Alert escalation rate, True/False positive accuracy and verification methodEscalation rate depends on a environment. Accuracy verification might not be required as this product mimics the actions of the top analyst in the team by recording and repeating human investigations.
4
Investigation speed, Scalability and performance during peak loadScalabiltiy and performance during peak load are explained.
5
Context enrichment and artifact analysisContext can be gathered through the browser, but we can also connect via API, browser sandboxes supported, Teams/Slack integration live
6
Detection of novel/unknown threats/AI evastion handlingNo support for detecting novel threats. Legion is architected and built to scale investigations.
7
Explainability, Human feedback integration and learning speedSince the product copies actions of analysts the human feedback integration is not as important. Learning speed - as few as 3 recorded investigations needed per use-case.
8
Time to full operationValue can be provided within a minutes. Browser extension is downloaded and recording can start immediately. Short learning period required to record investigations.
9
Integrations (out of the box, headless, custom)This product doesn't rely on traditional API integrations. All browser-accessible tools are supported out of the box without agents, connectors or APIs.
10
Multi-tenancy, data retention, export, governance, deletion controlEach instance runs in a separate tenant, is geo-located and compliant with local regulations like GDPR.
11
Additional capabilities beyond detection and responseThe product can play back investigation steps serving as a training tool that allows for guided investigations.
12
Compliance with security standardsSOC 2 Type 2, HIPAA, Pentest reports, ISO 27001, ISO 42001
13
Licensing model, Total cost of ownership and hidden costsLegion licensing is based on actions - each unit represents 10,000 actions which is calculated to equal the work of 2 FTE
14
Roadmap visibility and feature requestabilityRoadmap is visible, includes improvements to the browser based security operations.
15
Support availability and SLAsSupport delivered by dedicated cross functinal team, available multi channel support, scalable documentation and training.
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100