Bitbrains

Bitbrains has enjoyed outstanding growth in the nine years since it launched its cloud services platform. Now on its third-generation cloud, the company has a complex IT environment with approximately 3,000 virtual machines, 300 blades and many network devices, as well as three Network Operations Centers to manage the cloud environment used by Bitbrains’ customers.

The Problem

The complexity of Bitbrains’ customers’ IT environment presented major challenges to Bitbrains’ cyber security professionals; how do we keep up with the threat environment while maintaining our baseline vulnerability checks to ensure regulatory compliance?

“We had a compliance requirement from one of our customers,” said Giray Devlet, Bitbrains’ Chief Security Officer. “The customer needed daily vulnerability scans, but the process wasn’t automated; it was very labor-intensive, taking a week to carry out.”

Bitbrains already was using Tenable’s Nessus™ vulnerability scanner in conjunction with another vulnerability management solution. “We tried to use another product but it didn’t quite work, so we did some scripting around it and tried to automate it. But it didn’t create an overview of the situation. Our compliance auditors said this was not the way to go,” Devlet said. “Then we heard about Tenable’s SecurityCenter Continuous View from a colleague.”

The Tenable Solution

Once Bitbrains investigated Tenable’s SecurityCenter Continuous View™, it was an easy decision. “We had a very quick start-up, proof of concept and within a month we purchased it,” said Devlet.

Bitbrains worked with an outside consultant and a Tenable sales engineer on a three month deployment.

“The support I’ve received from Tenable and its staff has been excellent. Being able to get clear answers has been a delight,” said Devlet.

SecurityCenter CV provides a continuous monitoring platform that enables a comprehensive and integrated view of network health across all assets. Devlet’s staff can tell which systems on which networks have anti-virus programs, and which ones are up-to-date. They can identify the firewalls in place, the systems they protect. They can also identify the network components that are no longer used but still in place, which are weak spots that can provide an opening for industrious hackers.

Results

Since SecurityCenter CV was put in place it now takes only 24 hours to scan external-facing sites, rather than the week it previously took. “The possibility of automating is the biggest time-saver,” said Devlet.

Overall, it has helped greatly with identifying the biggest risks across the entire enterprise.“Security-wise, we have much better insight into what our current state is, what threats exist and what solutions are available,” said Devlet. “It also provides us insight with service customers, where we can see they did something wrong and are vulnerable to attacks, and when certain patches are not installed or missing.”