What's the difference between MBAE and Palo Alto Traps?

[blaznee]

I've been looking at 0 day protection tools that actually mitigate instead of just detect, and preferably as an endpoint solution.

 

The two most promising ones are MBAE and Cyvera/Palo Alto Traps.. They both seem to be doing pretty much the same thing, but I can't find any articles or the like comparing the two. Can someone explain to me the differences between the two if any? And perhaps guide me to some efficiency numbers comparing the two?

[Setheus]

I'd like to get some additional information about this as well. Can anyone provide any input? Thanks

[pbust]

Well in the case of MBAE there's quite a bit of public testing and public information that you can read about:

 

https://forums.malwarebytes.org/index.php?/topic/154691-exploits-how-they-work-and-how-to-crush-them/

https://forums.malwarebytes.org/index.php?/topic/136424-frequently-asked-questions/

http://malware.dontneedcoffee.com/2014/06/mbae.html

http://pcsl.r.worldssl.net/report/exploit/rce_mitigations_201408_en_malwarebytes.pdf

http://www.pcmag.com/article2/0,2817,2459439,00.asp

 

In terms of Palo Alto Traps I wish I could say something about it but unfortunately this software is not available for downloading, testing and public scrutiny. I'm sure it's a good product, but unfortunately this means there's no independent verification of its efficacy or lack thereof.

 

One thing to take into consideration is that in the case of Malwarebytes Endpoint Security (https://www.malwarebytes.org/business/endpointsecurity/) you get both market-proven Anti-Malware and Anti-Exploit products, whereas with Palo Alto you only get anti-exploit.

[Setheus]

Awesome! Thanks for the in depth info. I'll read up on both and figure out which one will fit better in our environment.

 

Thanks again! 

[Peter2150]

I called the folks at Palo Alto traps.  Bottom line, is if you aren't interested in at least 500 units, they aren't interested.

[pbust]

Very interesting feedback. Thanks for posting Peter!

 

In our case not only will we sell to consumers and companies of less than 500 PCs, but also of course provide free support as is needed.

[Peter2150]

Your welcome Pedro.   I've learned that when companies don't put a price on the site, but make you call, don't bother, the price is above us mere mortals     Another case in point Bromium