Future potential, but not now
I'll be asking for a refund, the software is not mature enough.
The update client is blind, you don't know what is does when and where.
Software patching is not included, even tough they pretend it is.
The mailscanner is only a mail forwarding scan tool.
The documents are quite basic, not configurable etc.
The security awareness test returns a 500 server error and does not work.
It has potential, but they need about 2 more years of development first.
Brian_HavocShield
May 9, 2024Hi K.Rens! Thanks for your review and giving us a try. I wanted to address your concerns, but of course, a refund will be provided.
The device update client's operation is outlined during the tool rollout and in our knowledgebase (https://info.havocshield.com/knowledge/hq47). Briefly, depending on the tool you rolled out it does only what that tool is designed to assist with. For example, if you selected the OS and Software Patching tool, that agent is designed to deploy tested, priority updates to your computer for the OS and software on a regular schedule, regardless of inconsistent or non-existent update settings on the computer. It does nothing more.
Software patching is indeed included for critical software. Of course we can't support all software, but indeed for things you'd expect to be common attack vectors in the application category, we do a lot of work on those. Here's a admin interface that shows one of our update profiles that run via that agent for customers to show you what it does: https://www.screencast.com/t/JM4NTdyKo
The MailArmor product is a service where you forward suspicious emails - on purpose, and we go further than that. It's actually one of the highest used and most appreciated tools by customers in our toolset. Here's why: We mimic the often-employed process in small businesses of forwarding on something suspicious that arrives in your inbox to the most technical person on the team so they can tell you if it's okay to work with or not. I'm betting you've been that person!!! We take that message, automatically open up all the links and attachments, pass them through enterprise-grade scanning services, examine the sender's reputation against multiple blacklists and other techniques to determine their risk, and then simply email the forwarder back saying if the suspicious email is okay to work with or not. If our systems aren't confident enough, then we escalate the review of that email to a member of our team for professional review. We hide a lot of the complexity of this behind the "just forward the email" idea because that's how easy it needs to be.
The policy manager includes attorney-written professional security policies and procedures. We refresh them once a year to align them with prevailing requirements. We don't suggest people use them outright with no review or customization. You can, to that end, draft multiple policies from the tool, download and customize, and then upload your ready-for-publishing version. As with the rest of our tools, our desire isn't to make everything as configurable as possible - it's to get the job done. These policies have met the muster of many enterprise company compliance teams and the government on behalf of our customers.
Totally sucks on the security training test - This is, unfortunately, due to an issue with the underlying vendor there that has since been resolved (https://status.webroot.com/incidents/4jz2dst0sqdl). Sorry about that!