Blink Platform

The newer AI features are a great step in the right direction. It really helps with those on the team that are unfamiliar with development processes, because they can do things aided by the AI and create their own workflows. This is truly the core of what SOAR has been missing since its inception. Case Management has improved over the time we've used the tool and is some of the best I've seen in the SOAR industry. Instead of assuming that everything will be automated from end-to-end (which almost never happens except in the simplest of workflows), BlinkOps has an elegant CM solution that works fairly well.

What I like most about the product is its versatility. Previous products of a similar nature were rigid, which meant the tool became brittle when we tried to coax certain usages out of it that weren't native. I have so many paths to develop a solution and it feels amazing. Also, the paths aren't supremely convoluted and difficult, they are straight forward and abstract enough to fit most problems.

Breadth of integrations: Wide range of integrations and their ability to build out new integrations on the fly. Ease of use/low barrier to automation: Internal support has taken to the product and built their own automation compared to other products. Self-service request portal capability: Menu style self service portal for other departments to submit request which triggers automation. Dedicated engineering support aligned to our business outcomes.

1. There are still times when a programmer mentality is still needed, even with the AI. People on the team that don't have a dev background may still need to take it very slowly to get anything useful from a workflow. 2. There are questions in the overall licensing and how pricing will eventually breakout. If not careful within the platform, iterations in a workflow could potentially eat your license alive. The team seems very flexible and willing to work with us, so this hasn't been an issue so far. 3. BlinkOps does a better job than most with Case Management, but my ultimate vision is something that not only automates workflows, but becomes the mythical and fully customizable single pane of glass that vendors harp about in every discussion. Imagine being able to aggregate data from multiple tools and generating your own set of dashboards that allow you to manipulate your data to your heart's content. BlinkOps sits at the center of the security universe, so why not?

The issues or weaknesses for the product are small and are probably growing pains since it's pretty new. We were having an issue with the automatic save during workflow development, which led to some hours of work being lost. We reached out to support which helped in the best capacity and decreased the frequency of the issue. Some of the docs are a bit vague and misleading. While not having the option to insert a breakpoint during workflow test runs, there is the option to disable the workflow, but the workflow will just skip over and continue on, having a breakpoint would be very helpful.

The AI portion of building workflow or automation is great but it would be nice for AI to assist on enhancing workflows as new integrations happen in real time. Reporting on human vs automation interaction. While we try to have full end to end automation I still would like to know if a human is holding up the automation completion and by how much. This is nitpicking but having a agent on machines to record task to determine how to automate. I haven't found this with others but seems like something that is feasible.