Blumira Automated Detection & Response Reviews

The strongest feature of Blumira is by far their support environment. Between our testing phase with their engineers, who would hop on Zoom calls with us to help us get set up, to their technical support team, who have done a fantastic job walking me through setting up detection rules, examining logs to give a greater context to findings and answering all questions we have, support has been a fantastic help.

The only real downside to Blumira so far that we have experienced is there sheer volume of data that we now have access to, but support has been

Blumira has detected multiple attempts by bad actors that we were not previously aware of. The service has also been extremely helpful in adding additional context to alerts like email rule changes and location detections.

Real time alerting has got even more reliable and the text messaging for P2 and higher alerts is handy!

Not at the moment! Everything we use it for seems to be working well.

Getting real time alerts to help prevent BEC for our clients. It has made a huge difference already and the moment a forwarding rule indicating a BEC is created we are able to act on it.

I like how quick Blumira Automated Detection & Response can detect suspicious activity in the Microsoft tenant. It's quick and easy to manage. It helps me take actions in my organization. For example, if someone is trying to access our tenant, changing 2FA, using the wrong password, or signing in from a different country and violating any policies, I can get this information quickly from Blumira, which allows us to take action right in the moment. Blumira was also simple to adapt and use, which made it a better option for us compared to our previous tool. The initial setup was easy, with just a few extra steps, but no problems. Overall, Blumira is great!

I will say, a better explanation about the onboard process, but other than that, Blumira it's great!

I use Blumira Automated Detection & Response to swiftly detect suspicious activity in my Office 365 Tenant, helping me monitor user sign-ins and address potential threats immediately. Its integration with our MDR agent assists in taking prompt actions against security violations.

I really like the SOC team that is included with Blumira Automated Detection & Response. Being part of a small IT team, the SOC team saves us a lot of time by freeing us from doing extensive research. Their presence provides great value. Additionally, the setup was pretty easy, thanks to their sales and support staff, who were great with any questions we had.

There really isn't anything to dislike from an IT point of view.

I use Blumira Automated Detection & Response for indicators of compromise, which alerts us and cuts down response and remediation time for security events. The included SOC team saves my small IT team time by handling research, offering great value.

It's a very user-friendly application for administration.

Currently there are often times items identified where there are more data and links to other sources vs ingesting more of the Raw data. I would like to see this improved.

Providing me additional views in addition to additional oversight of our SaaS environment.

I think Blumira Automated Detection & Response does exactly what it is intended to do and it's constantly being improved. I really appreciate that the folks behind it are enthusiastic and have been very attentive and responsive. The onboarding experience was the best I've ever had. It's also great that it integrates with all our major internal security and administrative systems. The initial setup was fantastic because it was really easy to get started, and the onboarding team was super.

I wish the workflows associated with its 'findings' were customizable. I often think their design isn't as useful as it could be.

It gives us holistic alerting to events and activities that we would likely otherwise be blind to, calling out important events for our small team to investigate.

I find Blumira Automated Detection & Response incredibly useful for its unified dashboard that brings all my various security tools and alerts into one place. The logging platform for all of our security logs is also a major plus. I think the support is the most useful aspect of Blumira. The ease of reaching out to their support whenever I have a question, and the personalized attention I get because the team is small enough to know me, makes it feel like a support system I can rely on, unlike a huge faceless MSP. They always respond promptly and are willing to help with complex problems, which is why we renewed. Additionally, the detections, customizing rules, and detection filters work great, and the initial setup was very easy, with everything up and running in less than a week.

The lack of support for webhook has kept us from connecting several other security tools to it. I'd like to see faster integrations if possible - we have a few standing integration requests, which I do genuinely believe will be delivered on, but they tend to take a long time to be developed. I'd like to see integrations for things like Seraphic Web Security, Absolute Security, PRTG network monitoring, NUTANIX and other services we use. I'd also say that in general, if custom detections could be developed faster that would be a great plus. In general, these things do work, it's just the speed at which customization is completed could be improved.

I use Blumira Automated Detection & Response to consolidate multiple dashboards into one, making monitoring easier. It serves as a unified logging platform, keeping all security logs in one place.

Nothing new to add. You have listened to our feature requests and are very receptive. We enjoy the monthly newsletters and webinars to keep everyone updated and involved.

We have had some challenges when detections come in and we review them from the Finding details summary page. The user was not being displayed and Blumira listened to our feedback and later implemented. Thank you for listening!

One suggestion would be to add something to the Analysis section of the alert/detection to include a user involved. We are looking for ways to automate response when False Positives in our customers environment and having more details could help. Open to having strategy sessions between Blumira and our teams to work towards a solution.

works faster and makes detection easier still, but updates have improved the service

just makes everything easier for me bottom-line

Auto-Contain Endpoint Threats Immediately,Automatically Block Malicious Traffic,Guided Response for IT Team.

Blumira enables fast incident resolution. Its alerting is impressively quick—often faster than Microsoft’s—making it a strong choice for timely threat detection. I especially like the text alerts.

Blumira lacks some auto-remediation capabilities. The user interface could be more intuitive, and the process for assigning responders feels unnecessarily complex and time-consuming

We needed a solution, and Blumira was willing to let us evaluate their product. We are still using it 4 years later. We have used Blumira for years.