My company's customers use Sectrio, a very good product offering IoT OT Security Suite. The tool is not for IT security as such. Manufacturing, oil and gas, and any kind of place where you use automated data systems are where OT security is needed, and Sectrio comes into the picture. Sectrio offers a pretty good HoneyPot network. Sectrio also offers threat intelligence, which can be provided to users with the help of the HoneyPot network. Sectrio offers IoT-OT-IT Converged Security Suite, which gives you multiple scans of all of the devices while providing visibility and status of your IoT devices.
What is our primary use case?
What is most valuable?
Sectrio has the capability to understand many of the protocols, which are proprietary protocols used by the manufacturers of automated machines that have to be protected, making it one of the tool's USPs. From the perspective of the product's use in India, Sectrio is the only OT security solution verified within India.
What needs improvement?
I want Sectrio's sales team to be a lot more aggressive than how they operate currently.
For how long have I used the solution?
I have been using Sectrio for two months. My company is a reseller of the product.
What do I think about the stability of the solution?
It is a stable solution. Stability-wise, I rate the solution an eight out of ten.
What do I think about the scalability of the solution?
It is an absolutely scalable solution. There is nothing that is difficult to scale up or down in the solution.
My company caters to clients of all sizes who use the solution. My company has worked with very large Indian government departments, and we have also worked with mid-sized and large-sized businesses, but we haven't worked with small enterprises.
How are customer service and support?
The solution's technical support is very good. I rate the technical support an eight out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
From the point of view of a reseller, Sectrio is better than other products in the sense that there is a lot of direct interaction my company has with Sectrio's teams instead of us having to communicate with the tool's team members via some impersonal portal on the internet. At the same time, not having an online portal is also a disadvantage because when you use a portal like Sophos and Sophos Central, where Sophos has a partner portal to register a user and get the pricing details, everything becomes a lot more streamlined. If you have to deal with people every time, then it gets a little cluttered. The aforementioned details revolve around the area of online portals, where the same thing can be considered a good point and a bad point.
How was the initial setup?
The solution is deployed on the cloud.
Sectrio is mostly a cloud-based product, so its technicians don't have to sit at the client end to be able to deploy it. I think the tool needs one machine that has to be put in, which collects data, after which everything else happens in Sectrio's SOC, which has a whole lot of people, but I don't know how many are involved with the deployment phase for each client.
What's my experience with pricing, setup cost, and licensing?
Sectrio is a product that is priced in the mid-range. As there are very large-scale systems that are protected using Sectrio, I think that though the tool tends to be expensive, it does not make it the most expensive product in the world. Companies like Claroty vs Dragos are Sectrio's competitors and are much more expensive. There is a need to make a yearly payment towards the licensing costs attached to the solution. The additional costs attached to the licensing charges would depend on what the user wants from the tool, as Sectrio is able to customize the tool. The license could be on an annual basis, or it could be for a total of five years, but ultimately, it all depends on how the client wants the tool to be built.
What other advice do I have?
Sectrio as a product is very good. The amount or number of devices that Sectrio is able to cover and the detail that they go into when they do a risk assessment for a client is pretty nice.
The most difficult area to deal with when it comes to Sectrio is that it has a very small sales team. Sectrio needs to have a large team and be much more aggressive while providing a demo.
Since it has only been two months with the product, and the time for the maintenance process has not yet come up, I can't comment on the level of maintenance required for the tool.
My suggestion to others is that instead of buying an OT security solution directly, they should always go in for a risk assessment and consultation, after which, based on the report that they get, they should align their policies and the security policies of their companies. After the aforementioned steps are followed, people can decide on what kind of product or solution they want to buy from the market.
I rate the product an eight out of ten.
