Stacklet Reviews

Reasons why I like Stacklet

-Open-source policy language - Our engineers already use Cloud Custodian (c7n). Hence, they can easily add their own policies or adapt the pre-written c7n policies provided by Stacklet.

-Scalable - Stacklet makes it easy to deploy across hundreds of accounts

Stacklet brings the best of Cloud Custodian compliance policies within manageable reach of even the most disparate and large organizations. With Stacklet, we can automate compliance checks for any of our cloud environments, along with auto-remediate any of our findings without requiring any human interaction. Compliance checks are easy to create and are well documented. Actions taken upon findings can range from as simple as record findings in a database, to sending notifications (email, IM bot messaging, ticket generation), to making a cloud provider API call to correct the setting, to custom calls to fit your unique desires. Stacklet also provides access to a database of most cloud resources defined, allowing for answers to most cloud platform questions easy to answer, as long as you can envision the SQL query. In addition to the above product portfolio, I truly love the fact that Stacklet is tightly bound with the cloud custodian community, with each team improving core aspects of the compliance policy execution framework. Stacklet's add-on of management tools and assetdb make the community offering something which is manageable with minimal effort, no matter how complicated out environment may be.

Stacklet is a younger company that is still maturing their offerings. This has meant that I may need a newer feature which has not yet been coded up. In my experience, this had meant that I may need to wait a few months for most of my new feature requests. On the flip side, this has been beneficial for me in the long run as more established/older companies have a track history of equating lack of current features with a lack of desire to address my new requirements on any timeline.

Stacklet provides an easy framework to take audit requirements in the morning, have policies and remediation actions in place by lunch, and immediately turn over to my operations team. When operational questions come up, Stacklet's assetdb allow us to immediately provide the answers we're looking for so we don't need to waste time assessing our environment.

The ability to create custom rules in addition to the compliance packages out of the box that they provide for you. In addition to the ability to customize rules checks is their support team. Very knowledgeable and extremely helpful! And they help your team by teaching them how to use the product when working to solve problems, not just provide a canned KB article.

My biggest dislike is the lack of compliance frameworks currently available out of the box for their product. I know they are adding additional frameworks at this point, and we can work around that aspect due to the ability to customize our rule checks at an extremely high level.

Near real-time cloud inventory collection that includes those resources meta-data attributes that enables us to understand the security related to that asset. This capability has helped us to do this across many cloud accounts and tenants using a centralized console to report and take action from. Stacklet.

It was easy to set up, provides good reporting and analysis of resources, and has granular policy configurations. The staff is very helpful and friendly.

We are having issues getting Azure reporting

The platform is helping us resolve audit and compliance issues.

Constant addition of features.

AssetDB for querying

Great support team.

Have not found any issues in working with the stacklet platform.

Stacklet elevates the open source Cloud Custodian project, wrapping with orchestration services that enable codified multi-cloud governance as code. It enables our cloud operations teams to write repeatable, declarative code policies that can be used repeatedly and map to our specific business needs as they evolve, regardless of hosting location. We're able to sustainably deliver governance services that protect financial, security, and operational outcomes at scale. As business needs or cloud providers change, I'm confident that maturing today's codified policies for tomorrow's needs.

Stacklet additional comes with an additional real-time cloud asset database service. We've been able to accelerate flexibly interrogating our cloud asset inventory in near real-time and overlaying other data sources to build enhanced business intelligence. The data outputs are driving additional perspectives of our assets and their configuration status, mapping to financial or other operational perspectives used across the organization in day-to-day operations.

The ability to customize the compliance policies to meet our specific needs, and the rich set of APIs to integrate with our automation and DevOps tools. Many other off-the-shelf compliance products have very limited customization features which lead to false positives and false negatives, and also requires more complicated exception handling processes.

Additionally, the Stacklet team has been outstanding in taking our feedback and quickly incorporating improvements in their platform.

The administrative and reporting user-interfaces are still evolving, though we primarily use the APIs so it is not a big issue for us.

Governance as Code - Standardizing code that is consistent, and easy to use for developing cost savings, compliance, and security policies. Before we had teams and individuals using an assortment of code, bash, python, etc, and deploying them using VMs and other serverless compute services, which created issues in troubleshooting, updating, and locating the different policy scripts.

AssetDB - This allows our IT and Security teams to search (using SQL queries) across all regions and accounts, instead of having to log in to each account to search for a resource. Having the ability to generate inventory reports across accounts has also improved our ability to meet different compliance initiatives.

Real time enforcement of security policies across all the cloud environments. Provides the security by reducing the risks by centralizing the governance. Also, provide the historical revisions and dashboards for tracking purposes.

I think the biggest missing part from Stacklet platform has been lack of compliance frameworks. Whenever we talk about data governance, there's always talk about different compliance frameworks but it looks like there are not many frameworks currently available at this time.

1. Real time business security policies.

2. Achieving data governance across all the platforms.

Policy management is flexible and customizable so we can enable what is correct for our needs. The APIs are easy to use so integrating to our other tooling is straight forward.

The Stacklet team's support is very good. They are collaborative and very interested in our success.

The platform is still evolving, so there are some nice-to-have features yet to be implemented.

Our organizational governance needs to mature. Additionally, we are transitioning from a vendor-supported operational model. Stacklet is enabling us to take control of the cloud security compliance in-house and make it better.