Technology · Global

Inspira's Cyber Fusion Centers cut incident resolution 70% with Cortex XSOAR.

SOAR automation drops average incident resolution from 12 hours to 1.5-2 hours (~70%).

// Client overview

Inspira operates its security operations centers - Cyber Fusion Centers (CFCs) - as an MSSP, managing the entire cyberthreat-management landscape for customers across multiple layers. It sought a managed offering that could automate the CFCs for faster deployments and client onboarding, and a unified view of the cyberthreats customers encounter.

As both a security-solutions provider and an MSSP, Inspira needed to reduce manual work for lower-severity (P1/P2) incidents, automate and orchestrate response to reduce remediation time, and optimize incident management in its own environment with a stable, mature SOAR solution - with global reach to scale across geographies.

Sector

Technology

Region

Global

Engagement

Cyber transformation

Services

Managed Security (MSSP) · SOAR automation & orchestration · Cyber Fusion Center operations · Playbook development

Technologies

Palo Alto Cortex XSOAR · Palo Alto Cortex XDR

// Key challenges

SOC optimization: reduce manual processes and lower the time spent on incident resolution.

As a solutions provider: reduce manual activity for P1 and P2 incidents and automate/orchestrate response to cut remediation time, on an integrated security-automation platform.

As an MSSP: optimize incident management in its own environment with a stable, mature SOAR solution to offer better turnaround to end customers, with global presence to scale across geographies.

// The solution · highlights

Inspira evaluated multiple SOAR solutions and selected Palo Alto Networks' Cortex XSOAR for its superior integration capabilities and the strength of the wider Cortex portfolio (XSOAR + XDR).

With 300+ engineers across its CFCs, Inspira built the right use cases and playbooks - over 15 playbooks for each of its top-10 customers and more than 20 in its own CFCs.

Cortex XSOAR unified case management, automation and real-time collaboration, letting Inspira manage alerts across all sources, standardize processes with playbooks, act on threat intelligence and automate response for any security service.

// Outcome & benefits

Average incident resolution time fell from 12 hours to 1.5-2 hours - a reduction of as much as 70%.

End-to-end handling of P1/P2 incidents dropped drastically with automation, freeing analyst time for more critical tasks.

Resources were freed for alternative work as auto-remediation and automated response replaced manual triage.

A scalable platform ready to extend to Inspira's other global offices when needed.

// By the numbers · ROI

Incident resolution cut from 12 hours to 1.5-2 hours (~70%)

15+ playbooks per top-10 customer

20+ internal CFC playbooks

300+ CFC engineers

// Recent posts