Technology · Global

Inspira's Cyber Fusion Centers cut incident resolution 70% with Cortex XSOAR.

SOAR automation drops average incident resolution from 12 hours to 1.5-2 hours (~70%).

// Client overview

Inspira operates its security operations centers - Cyber Fusion Centers (CFCs) - as an MSSP, managing the entire cyberthreat-management landscape for customers across multiple layers. It sought a managed offering that could automate the CFCs for faster deployments and client onboarding, and a unified view of the cyberthreats customers encounter.

As both a security-solutions provider and an MSSP, Inspira needed to reduce manual work for lower-severity (P1/P2) incidents, automate and orchestrate response to reduce remediation time, and optimize incident management in its own environment with a stable, mature SOAR solution - with global reach to scale across geographies.

Sector

Technology

Region

Global

Engagement

Cyber transformation

Services

Managed Security (MSSP) · SOAR automation & orchestration · Cyber Fusion Center operations · Playbook development

Technologies

Palo Alto Cortex XSOAR · Palo Alto Cortex XDR

// Key challenges

SOC optimization: reduce manual processes and lower the time spent on incident resolution.

As a solutions provider: reduce manual activity for P1 and P2 incidents and automate/orchestrate response to cut remediation time, on an integrated security-automation platform.

As an MSSP: optimize incident management in its own environment with a stable, mature SOAR solution to offer better turnaround to end customers, with global presence to scale across geographies.

// The solution · highlights

Inspira evaluated multiple SOAR solutions and selected Palo Alto Networks' Cortex XSOAR for its superior integration capabilities and the strength of the wider Cortex portfolio (XSOAR + XDR).

With 300+ engineers across its CFCs, Inspira built the right use cases and playbooks - over 15 playbooks for each of its top-10 customers and more than 20 in its own CFCs.

Cortex XSOAR unified case management, automation and real-time collaboration, letting Inspira manage alerts across all sources, standardize processes with playbooks, act on threat intelligence and automate response for any security service.

// Outcome & benefits

Average incident resolution time fell from 12 hours to 1.5-2 hours - a reduction of as much as 70%.

End-to-end handling of P1/P2 incidents dropped drastically with automation, freeing analyst time for more critical tasks.

Resources were freed for alternative work as auto-remediation and automated response replaced manual triage.

A scalable platform ready to extend to Inspira's other global offices when needed.

// By the numbers · ROI

Incident resolution cut from 12 hours to 1.5-2 hours (~70%)

15+ playbooks per top-10 customer

20+ internal CFC playbooks

300+ CFC engineers

“With Cortex XSOAR, Inspira can manage alerts across all sources, standardise processes with playbooks, take action on threat intelligence, and automate response for any security service, thereby reducing the average incident resolution time from a total of 12 hours to 1.5-2 hours or by as much as 70 percent.”
Gaurav Deshpande, VP International Sales & Global Leader, Integrated Cyber Threat Management Practice, Inspira

// Recent posts