StackRox

What do you like best?

StackRox has simplified compliance for us. We get a view in one place of how well we're meeting the controls from CIS Benchmarks, NIST, PCI, and HIPAA and SOC-2.

We really needed something for SOC-2 compliance, vulnerability management, IDS, k8s secrets issues, auditing access to customer environments, etc. StackRox ... rocks for this.

Filling in vendor security assessments became much easier after we deployed StackRox.

What do you dislike?

As a command line person, I would have preferred to have more functionality in the command line tool, but I still have to explore that a bit more.

What problems are you solving with the product? What benefits have you realized?

filling in security vendor assessments (we're a security company) and automatically generating compliance reports from the dashboard for SOC-2 compliance.