Customer Story

Transportation Company Chooses Devo Over Elastic for Enterprise Logging & Security

At a Glance
  • Centrally manage data, enriched with other intelligence sources
  • Scalability to handle growing data volumes
  • Ingest both cloud and on-premises data in raw format

Industry: Transportation

Location: United States

About the Global Consumer Transportation Company

A large, multinational consumer transportation company with a 100% remote workforce discovered an employee had downloaded sensitive information they were not entitled to access. As a result, the company prioritized increasing its overall visibility and security posture.

To accomplish this, the firm needed to dramatically improve its ability to ingest and combine data from assorted cloud services and legacy apps relied on by remote workers, which Elastic was unable to do.

Customer Quick Facts

Challenge

This global consumer transportation company was struggling with its security solution’s inability to ingest and analyze cloud and on-premises log data. When an insider breach was discovered after the fact, the company sought a new provider that would enable the business to be more proactive and accurate.

Solution

The Devo Data Analytics Platform ingests and automatically enriches raw data from both cloud and on-premises sources. Analysts can easily customize their dashboards and work with the data immediately upon ingest. As a cloud-native solution, scalability and performance are not an issue.

Requirements

  • Ingest both cloud and on-premises data in raw format
  • Centrally manage data, enriched with other intelligence sources
  • Visual, easy-to-use interface, which analysts can customize
  • Scalability to handle growing data volumes

Wanted: A Solution to Combine, Enrich, and Quickly Analyze Cloud and On-Premises Data

Even before the pandemic, this large, global consumer transportation company’s workforce was 100% remote and scattered around the world. As a result, the company relies on a wide variety of cloud services as well as on-premises applications.

The business had been experiencing numerous challenges with its existing vendor, Elastic. But the belated discovery that an unauthorized internal user had downloaded sensitive information drove the company to take decisive action to improve its overall visibility and security posture.

Obtaining greater visibility across the entire attack surface became the highest priority. The business’s diverse data needs range from cloud sources, such as Amazon GuardDuty, Jamf Pro, Telegraf, Duo, Okta, and G Suite, to legacy on-premises applications.

Such a wide variety of data sources proved too challenging for Elastic to ingest, enrich with third-party intelligence, and analyze quickly. This drove the transportation company to find a new provider.

Why Devo

Several critical factors made Devo attractive to the customer, including the ability to:

  • Ingest machine data in raw format from any source, combine it with on-premises sources, and centrally manage it
  • Automatically enrich data with third-party intelligence to facilitate analysts’ threat-hunting and investigation workflows
  • Easily analyze machine data, using the built-in Activeboards, and bring it to life with rich visuals, intuitive dashboards, and interactive capabilities
  • Easily scale and manage large volumes of data (e.g., multiple terabytes) and query as needed
  • Attain a lower TCO via significantly reduced hardware costs for compute, storage, and ingress/egress costs because Devo is a true SaaS solution

How much can you save?

The Devo architecture yields increased performance and significant cost savings. Ready to see how much you can save?

Next Steps

Because Devo is able to centrally ingest, store, and manage data of all types, other groups in the transportation company, such as IT operations and business intelligence, are investigating using Devo.