• CASE STUDY

Abraxas Automates Compliance Management with Swimlane

Learn how Abraxas leverages Swimlane to automate compliance management, enhance security operations, and increase intelligence by 5x.

Request a Demo

Industry

MSSP

Integration

XDR

SIEM

Use Cases

  • Incident response automation
  • Compliance management

Challenges

  • Manual bottlenecks in multi-tenant SOCs
  • Complex compliance process

Outcomes

  • Enhanced analyst engagement & productivity
  • Increased intelligence by 5x
  • Faster incident response

About Abraxas

Abraxas Informatik AG, Switzerland’s largest IT solutions provider focussed on the public sector, delivers efficient, secure, and integrated IT solutions to Swiss administrations, authorities, and companies. As an MSSP, Abraxas encountered repetitive tasks and manual data enrichment challenges, necessitating more efficient incident response and compliance processes.

For the past four years, Abraxas has leveraged Swimlane to automate and enhance its security operations. Their seven-member team, including three dedicated automation specialists, manages both Abraxas’ internal SOC and SOC services to their clients. 

This case study explores how Swimlane supports Abraxas’s growth by reducing workload, automating compliance, improving analyst engagement, and delivering more effective cybersecurity services.

Cybersecurity Challenges

Manual Bottlenecks in Multi-Tenant SOCs

Abraxas offers extensive SOC, XDR, and vulnerability management services. Facilitating these services across multiple independent tenants created operational challenges for Abraxas. They found that the repetitive tasks and manual data enrichment associated with incident response to be labor-intensive and costly. This high level of manual effort burdened the team, diverted attention from critical security issues, slowed response times, and increased the potential for human error and security vulnerabilities.


Complex System Roll-Out Compliance Process

Abraxas enforces a rigid compliance process for new product deployments. Each system requires manual compliance and vulnerability scans based on the Cybersecurity Infrastructure Security Agency (CISA) standards. Teams were required to manually request, schedule, and manage these scans, frequently involving engineers. This manual effort was time-consuming, led to delays, and impeded efficient system rollouts.

AI HYPERAUTOMATION SOLUTION

Swimlane’s Simplicity Drives Quick Value

Abraxas chose Swimlane for its user-friendly nature. The proof of concept confirmed that the Swimlane automation platform met their needs, and the team was able to easily build automations within days. The platforms simplicity eliminated the need for extensive training, allowing Abraxas to quickly realize value and implement key automation workflows.

Intuitive Application Builder for Efficient Automations Development

Abraxas developers benefit from an intuitive application builder within the Swimlane automation platform. They love how the application builder provides a comprehensive workflow overview and robust debugging capabilities. It acts as a real-time debugging console to quickly identify issues, inspect parameters and streamline the development process for efficient, tailored security automation solutions.

Infinite Integrations for Unmatched Flexibility

Swimlane provides unlimited integration flexibility through a combination of pre-built integrations and custom Python scripting. This dual approach allows Abraxas to seamlessly connect with any API-enabled tool or service, ensuring quick and efficient onboarding of new technologies. 

Swimlane Dedication to Ensure Abraxas Success

Beyond its ease of use, Swimlane’s customer-centric approach truly stands out. Abraxas benefits from proactive discussions and outstanding support, especially valuable for on-prem updates. This dedicated partnership ensures Abraxas’ continued platform success.

TOP USE CASES

Incident Response Automation

Compliance Management

Incident Response Automation

Abraxas leverages Swimlane to centralize its incident response process, creating a single pane of glass for its analysts. By consolidating incidents from various sources, such as XDR and SIEM, regardless of customer or tenant, Swimlane provides a comprehensive view of all security events. This centralized platform enriches incidents with threat intelligence, data, user information, and other relevant details, empowering Abraxas analysts with the context needed to prioritize and respond effectively.

Compliance Management

Abraxas leverages Swimlane to automate compliance and vulnerability scanning process for new systems. Swimlane orchestrates the entire workflow beginning with sending scan requests, monitoring status, and finally, generating reports upon completion. This automation reduces manual effort, saves time and money, and streamlines operations.

OUTCOMES

Enhanced analyst engagement & productivity

Automation has reduced manual workloads, avoiding SOC burnout and allowing them to focus on more strategic security initiatives, and to do tasks they wouldn’t be able to do if they were using Swimlane.

Increased intelligence by 5x

With Swimlane, Abraxas leverages five threat intelligence sources, compared to being limited to one due to time constraints.

Enhanced capabilities

Swimlane reduces MTTR by automatically isolating endpoints and stopping processes for known malicious behavior, without human intervention.

“I would recommend Swimlane to my peers because not only is the automation platform very good and flexible, but also because Swimlane as a company really cares about their customers. They have outstanding support and help you with problems. They have a lot of knowledge and experience, so you can get things done very fast.”

Christoph Müller
Head of Security Solutions

About the customer

Christoph Müller

Head of Security Solutions, Abraxas

Christoph Müller leads Security Solutions at Abraxas, safeguarding infrastructure and data from cyber threats. With over 20 years in IT and 10+ in cybersecurity, he’s strengthened Abraxas’ security operations. Starting as a cybersecurity engineer, he advanced to lead the seven-person Security Operations team, driving security enhancements and efficiency.

Ready to become a customer?

Automate at the scale of 25M actions per day, 10x faster than anything else.

Request Demo