Vectra AI Inc. > Case Studies > Vectra gives beauty industry retailer a cybersecurity makeover

Vectra gives beauty industry retailer a cybersecurity makeover

Customer Company Size

Large Corporate

Country

United States

Product

Cognito NDR platform
Cognito Detect
Cognito Recall

Tech Stack

AI-derived machine learning algorithms
Network detection and response (NDR)

Implementation Scale

Enterprise-wide Deployment

Impact Metrics

Cost Savings
Productivity Improvements

Technology Category

Cybersecurity & Privacy - Network Security
Analytics & Modeling - Machine Learning

Applicable Industries

Retail

Applicable Functions

Business Operation

Use Cases

Cybersecurity
Intrusion Detection Systems

Services

Cybersecurity Services

About The Customer

The customer is a global retail giant in the beauty industry. The company operates hundreds of stores and a busy online retail business. Despite the scale of its operations, the company has a lean security budget. The security operations center (SOC) team consists of seven members who are responsible for maintaining network security across all the stores and the online business. The company has a practice of hiring consultants annually to conduct red team exercises to test the effectiveness of their cybersecurity operations. However, the company has consistently failed these tests, indicating a need for improved cybersecurity measures.

The Challenge

The global retail giant in the beauty industry was struggling with maintaining network security for hundreds of stores and a busy online retail business with a lean security budget. Every year, the company would hire consultants to conduct red team exercises to test the mettle of cybersecurity operations, and every year it failed. The seven-member security operations center (SOC) team was in need of a solution that would provide visibility inside the network to detect and respond to hidden cyberattackers. They needed a network detection and response (NDR) platform that would identify attackers that bypass firewalls and IPS at the network perimeter and provide visibility into threats inside the network.

The Solution

The company decided to implement the Cognito NDR platform from Vectra. Cognito Detect, which runs on the Cognito NDR platform, uses AI-derived machine learning algorithms to automatically detect, triage, prioritize and respond to in-progress attack behaviors that pose the highest business risk across cloud, data center, IoT, and enterprise networks. By combining advanced machine learning techniques with always-learning behavioral models, Cognito Detect quickly and efficiently finds hidden and unknown attackers before they do damage. By automating manual Tier-1 and Tier-2 security tasks, Vectra significantly reduced the SOC workload and gave the security operations team more time to investigate incidents and proactively hunt for threats. Vectra also delivers security insights and context about every attack by extracting metadata from all network traffic, as well as relevant logs from workloads and SaaS applications like Office 365. This enables the retailer’s SOC team to perform faster, more conclusive incident investigations and AI-assisted threat hunting. In addition to empowering quick, decisive action in response to cyberattacks, Cognito Detect provides a vital starting point for professional threat hunters that use Cognito Recall for deeper investigations.

Operational Impact

The SOC team passed red team testing for the first time with the Cognito NDR platform from Vectra.
A reduced SOC workload gives the security team more time to investigate incidents and proactively hunt for threats.
Delivery of security insights and context about every attack, enabling the retailer’s SOC team to perform faster more conclusive incident investigations.