Rapid7 > Case Studies > Brooks Enhances Security Program with Rapid7 SOAR Solution

Brooks Enhances Security Program with Rapid7 SOAR Solution

Technology Category

Application Infrastructure & Middleware - Middleware, SDKs & Libraries
Cybersecurity & Privacy - Network Security

Applicable Industries

Apparel
National Security & Defense

Use Cases

Tamper Detection
Time Sensitive Networking

Services

Cybersecurity Services
System Integration

About The Customer

Brooks is a 108-year old American sports equipment company that designs and markets high-performance running shoes, apparel, and accessories. The company's products are sold in over sixty countries around the world. Headquartered in Seattle, Washington, Brooks is a subsidiary of Berkshire Hathaway, one of the top ten largest public companies in the world. The company has experienced rapid growth, doubling its sales from $500 million to $1 billion in a short amount of time and expanding its workforce to close to 1,800 employees.

The Challenge

Brooks, a rapidly growing sports equipment company, faced increasing security vulnerabilities due to its expansion. The company's growth from $500 million to $1 billion in sales, along with an increase in employees to 1,800, led to more hits on their website, more partners, and consequently, more security events, phishing emails, and potential risks. Despite having a security team of three analysts, the company struggled to stay ahead of the alerts. The traditionally manual, time-intensive incident response and vulnerability management processes were not scalable to meet the growing security challenges.

The Solution

Brooks implemented InsightConnect, Rapid7’s security orchestration, automation, and response (SOAR) solution to accelerate their incident response and vulnerability management processes. InsightConnect helped the security team scale their operations, regardless of the number of integrated systems. The solution was recommended by Ryan Fried, the senior security engineer at Brooks, who had used Rapid7 InsightConnect at a previous company. The solution was chosen after a successful proof of concept (POC) that demonstrated its value. InsightConnect not only saved the analysts' time but also increased their engagement and made their jobs easier by automating repetitive tasks. The solution also provided 24/7 coverage and faster response times without expanding the staff.

Operational Impact

The implementation of InsightConnect has significantly improved Brooks' security operations. The solution has increased analyst engagement and eliminated repetitive tasks, allowing the analysts to focus on more critical aspects of their jobs. It has also ensured consistency in blocking URLs, domains, or IP addresses in the right places every single time. The solution has transformed Brooks from a nine-to-five operation to a 24/7 shop, with predefined alerts for critical situations. The response times have improved, especially for potential ransomware attacks, with analysts being able to isolate the host directly from their phone. InsightConnect has also provided a library of pre-built workflows, enabling the security team to quickly build and adapt workflows as needed. The solution has helped the security team effectively deal with the company's surging growth and integrate new IT and security systems without adding complexity.

Quantitative Benefit

InsightConnect saves approximately 11 days or 88 hours of manpower each month.
Reduced the number of tabs analysts need to have open in their browser from 10-20 to just one or two during an incident investigation.
Enabled the company to become a 24/7 operation without expanding the staff.