Rapid7 > Case Studies > Experity's Security Operations Scaling with Rapid7 Managed Services

Experity's Security Operations Scaling with Rapid7 Managed Services

Technology Category

Cybersecurity & Privacy - Application Security
Cybersecurity & Privacy - Intrusion Detection

Applicable Industries

Glass
National Security & Defense

Applicable Functions

Quality Assurance

Use Cases

Intrusion Detection Systems
Tamper Detection

Services

Cybersecurity Services
Testing & Certification

About The Customer

Experity is a dynamic Health Information Technology company formed from the merger of the two largest urgent care Electronic Medical Records (EMR) companies in the country. With the merger came more employees in more locations working to develop and support Experity’s comprehensive urgent care operating system. Today, Experity provides integrated technology and services solutions to more than 5,700 on-demand healthcare practices, urgent care centers, diagnostic testing centers, and primary care centers nationwide. The company is growing quickly as it works towards its mission to power the patient-centered healthcare revolution. It operates in the healthcare industry and is considered a mid-market company.

The Challenge

Experity, a dynamic Health Information Technology company, was formed from the merger of the two largest urgent care Electronic Medical Records (EMR) companies in the country. This merger led to a rapid expansion of personnel, office locations, software, and services, creating unique challenges for the security team. The team was tasked with a substantial mission to protect the company from loss events of any kind, necessitating business continuity and standardization. The team was small and the expansion meant they would need to triple or quadruple their size to get the coverage they needed. The company had been using a Managed Detection and Response (MDR) platform, but it was not sufficient for the new scale of operations. It only monitored network and server activity and not endpoint activity, which was crucial as most security issues arise from user activities on desktops and laptops. The security team needed a platform to vet alerts from the increased number of employees and contractors.

The Solution

Experity found its solution in Rapid7, purchasing MDR for incident detection and response, Managed AppSec to enhance their application security, and InsightVM for vulnerability scanning. These tools provided activity monitoring, dynamic application security testing, and advanced vulnerability management analytics, enabling Experity to automatically assess, understand, and respond to risk across the entire IT infrastructure. Rapid7's MDR team vetted alerts and handled unusual activity, freeing up Experity's security team to focus on other tasks. Rapid7's InsightAppSec provided vulnerability management insights across their web applications, which were previously managed by the development teams. It also offered a managed service, eliminating the need for Experity's team to parse through hundreds of alerts. Rapid7's team also communicated directly with Experity's developers responsible for remediation, eliminating potential miscommunication.

Operational Impact

The implementation of Rapid7's managed services has brought about significant operational benefits for Experity. The advanced security capabilities have proven helpful for identifying and squashing malicious behavior and ensuring compliance with regulations such as HIPAA and HITRUST. The managed services have also allowed Experity's security team to focus more on their operations project work, policy and audit work, and planning the direction of their program instead of getting bogged down in the minutia of each alert. This has led to progress in maturing their policy and audit program. The relationship with Rapid7 has given Experity’s security team greater confidence in their ability to scale as the company expands. Rapid7's constant evolution and improvement of their products align with Experity's growth and market leadership in urgent care EMR.