The capability for multiple vendors (including our own) access through single point solution - easy configuration from any device anywhere with internet connectivity- clear reporting dashboard allows us as an organization get up close & personal w/threats affecting business continuity / risk management efforts.- lack or ability to differentiate between automated attack campaigns vs actual malicious activity- more advanced threat hunting capabilities would be beneficial at this time if they are not already present within existing offerings.