Thomas Murray saves time and money with LimaCharlie's SecOps Cloud Platform

COMPANY: Thomas Murray

FOUNDED: 1994

HEADQUARTERS: London, UK

CYBERSECURITY SERVICES: Cyber risk management, threat intelligence, attack surface management, breach and vulnerability monitoring, third-party cyber risk monitoring, incident response, digital forensics, incident response planning, and more.

OTHER SERVICES: Market risk intelligence and monitoring, third-party risk management, bank network management, regulatory compliance, and due diligence solutions.

SECTORS: Financial, banking, government, and enterprise clients in various sectors.

CLIENTS: Financial institutions and organizations of all sizes, including banks, asset managers, stock exchanges, pension funds, central securities depositories, and more.

CHALLENGES:

• Develop tailored security service offerings for a large, diverse client base

• Overcome integration issues and lack of flexibility experienced with traditional security solution vendors

• Execute cost-effective, engineering-centric cybersecurity workflows at scale

SOLUTION: LimaCharlie SecOps Cloud Platform (SCP)

BENEFITS:

• Multi-tenant architecture and IaC control enable efficient, scalable SecOps

• API-first platform offers well-integrated capabilities that can be customized as needed

• SCP automation capabilities reduce manual work, saving time and costs

Global risk management consultancy finds flexibility, scalability, and value in platform built for security service providers

Thomas Murray is a risk management consultancy with global reach. Its Cyber Risk division provides cyber risk assessment, monitoring, and incident response services to clients in the financial, banking, and government sectors.

Like other large, diversified security service providers, the firm has a number of challenging infrastructure needs:

• Tools that offer enough direct control for the company to capitalize on its team's expertise and deep knowledge of client industries

• Infrastructure flexible enough to be tailored to the needs of a broad and varied client base

• Solutions with the automation capabilities to support modern, scalable security operations

Until recently, Thomas Murray's leadership found itself unsatisfied with the security solutions offered by traditional vendors.

"Speed and value keep us ahead of the competition—as well as our ability to combine deep industry expertise with long-standing relationships to become our clients' trusted advisors," says Guillermo Roman, Senior DFIR Analyst. "But finding adaptable, flexible solutions that worked well with our automations and API-centric approach was difficult. Many big players out there offer great feature sets but are over-complicated or don't play well with other technologies."

Like an AWS for security service providers

Thomas Murray found what they needed in LimaCharlie's SecOps Cloud Platform (SCP).

The SCP is an integrated platform for security operations (SecOps) that delivers core cybersecurity capabilities via a public cloud-like model.

Everything in the platform is available API-first, on-demand, and pay-per-use. Telemetry data can be brought in from any source and routed to any destination, with event-driven response actions automated via a powerful detection and response (D&R) engine.

The platform also has an engineering-first architecture to support scalable security operations. Security configurations are managed using infrastructure-as-code (IaC) to help teams move away from time-consuming manual processes. Native multi-tenancy makes it possible to manage multiple organizations more efficiently.

"We built the SCP specifically with the needs of cybersecurity service providers in mind," says LimaCharlie founder Maxime Lamothe-Brassard. "Integration, automation, IaC, and multi-tenancy are at the heart of our design. We want to be for MSSPs what AWS has been for IT teams and software engineers: a pure infrastructure provider for SecOps at scale."

LimaCharlie engineers recognize that today's SecOps teams need flexibility above all else—and thus, they do not view their platform as the be-all and end-all of security tools. For this reason, third-party solutions can be easily integrated using the SCP and managed using the platform's single interface and unified data format. The SCP's bidirectional capabilities also enable teams to automate response actions across these third-party tools.

This approach was exactly what Thomas Murray was looking for. "Finding LimaCharlie was a breath of fresh air," says Roman. "What sets the SCP apart is the ability to integrate, automate, and deliver across a wide range of applications. It's a game-changer. We were able to quickly build solutions for our clients that enabled them to improve their security posture quickly and with little effort on their part."

Days to Hours. Hours to Minutes.

Thomas Murray noticed several benefits after adopting the SecOps Cloud Platform.

The platform's flexibility made it possible to create highly tailored offerings for individual clients and projects.

The SCP's open API access, thorough documentation, and robust D&R capabilities also let Thomas Murray automate many of its workflows and processes, resulting in significant savings.

"Eliminating repetitive, manual tasks and leveraging the SCP's API to perform remote actions led to huge time savings and greatly improved usability and connectivity with our internal systems and procedures," says Roman. "The ease of automation reduced our development time from days to hours, or hours to minutes, allowing us to deliver fast and cost-effective solutions for our clients."

In addition, Thomas Murray found that the SecOps Cloud Platform helped improve data handling processes and cut storage costs. The SCP includes one year of full storage for all telemetry data brought into the platform at no cost beyond that of ingestion. Because of this, Thomas Murray's team no longer had to spend time on manual data handling procedures or on creating local backups to prevent data loss. All telemetry is stored securely in the SCP cloud by default and is available on demand if needed.

"The ease of automation reduced our development time from days to hours, or hours to minutes, allowing us to deliver fast and cost-effective solutions for our clients."

Building for the future

Thomas Murray has found working with a dedicated cybersecurity infrastructure provider like LimaCharlie to be a different kind of vendor relationship, citing the SCP's extensive documentation and reliable API methods—as well as fast responses from development and support teams.

The company expects to expand its use of the SecOps Platform in the future, with plans to begin exploring the SCP's ability to query and analyze telemetry data from within the platform.

Beyond its own SecOps needs, Thomas Murray also sees value in the SCP for its clients and other cybersecurity services businesses.

"We recommend the SecOps Cloud Platform as a long-term EDR solution for clients under our services, as it clearly has been a great choice to build our automations and procedures around," says Roman.

"For our colleagues and other companies in the cybersecurity industry, we would recommend the SCP for its agility, simplicity, and ease of remote operation."

Getting Started

Curious to learn more? Watch Guillermo Roman demonstrate how they transformed their incident response with LimaCharlie in this webinar.

To see how LimaCharlie can help you reduce costs and simplify security operations, try our SecOps Cloud Platform for free or book a demo today at limacharlie.io.