“There was maybe one other platform that deserved consideration. But, they were so unrealistically expensive, even for an enterprise of our size to pay, it made no sense.”
Determined to find a tool that could offer effective automation and save precious man-hours, the security team set out on a comprehensive vendor review, compiling a list of 15 solutions across both established and newer-to-market vendors. Across seven months, the team dove deep into the capabilities of each, heavily weighting four key components:
- Customer Service
Integrations. A key tenet to their search, the University was already invested in several scanning and security solutions that they wanted to maintain. They quickly learned many of the prospective vendors offered scanning capabilities of their own, which the University would be forced to adopt instead.
Flexibility. Another key point for Nucleus: flexibility with assets. The University wanted to leverage data from their entire suite of tools, while having plasticity to shape prioritization based on their unique business context.
Pricing. While functionality was paramount to pricing, the University remained budget conscious. Finding that prices varied wildly from vendor to vendor, they were pleasantly surprised with the transparency and affordability of Nucleus, without sacrificing functionality.
Customer Service. As a final key component to the evaluation, the University valued collaboration and wanted a partnership to help evolve their vulnerability management program, recognizing that ‘cookie-cutter’ wasn’t going to be the right approach.
SEE WHY CUSTOMERS LOVE WORKING WITH US
Wondering if you should build in-house or work with a vendor like Nucleus?
Nucleus is now the central source of data for “everything” at the enterprise’s security operations, and has expanded in scope and adoption into other business units. By having a complete picture of their assets in one shared platform, developers can better prioritize their work while also giving product managers insight and focus to optimize the security posture of their product.
Nucleus helped shift the culture by bringing vast sets of data from disparate tools into a central hub and giving users that information across function. Using the Nucleus platform for unified vulnerability management enabled the enterprise to get vital security information out from behind the curtain of the security team and into the hands and desktops of the developer team. Developers now take direct responsibility for security in their area and can act on the information in their lane.