Case studies · Layered protection
A US life sciences online retailer
Two years of layered SIEM/XDR and deception technology. A small, well-controlled external attack surface with no high or critical vulnerabilities. Zero successful attacks.
Clients are anonymised.
Results
- Zero successful attacks
- Two years of layered protection with SIEM/XDR and deception technology
- A small, well-controlled external attack surface, with no high or critical vulnerabilities
At a glance
The outcome
Since SIEM/XDR and deception technology were deployed through this engagement two years ago, the client has experienced no successful attacks.
A recent monthly monitoring report shows a small, well-controlled external attack surface: all monitored assets rated clean that month, a small number of parked lookalike domains (all low severity), a handful of vulnerability findings none of which were high or critical, and no dark-web exposures listed.
Recommended next steps were to set a missing cookie security attribute on some brand websites, consider registering the most valuable domain variants defensively, and keep monitoring for changes.
The challenge
The client needed both visibility across its environment and an effective way to stop attackers early — without the cost and complexity typically associated with enterprise security operations.
With several brand websites, it also needed to know if anyone was registering lookalike domains, or if weaknesses were appearing on its internet-facing systems.
How Amon Dîn helped
Amon Dîn advised the client on a layered security approach, guided their entire cyber journey, and helped them get 24/7 monitoring in place. Through this engagement the client received two complementary capabilities: an open-source SIEM/XDR platform for centralised monitoring, detection and response, and deception technology that places decoys so attackers reveal themselves before they reach genuine systems and data.
Together these give broad visibility alongside an early-warning layer. The engagement also monitors the client's external footprint monthly — brand domains, IP addresses and exposed services, plus lookalike domain and vulnerability checks. The combined approach has been in place for two years.
What the client said
“Amon Dîn has been a reliable security partner for the past two years. They have promptly alerted us to potential threats and attack vectors and kept us up to date on the latest developments in cybersecurity. Their communication is always clear, with specific action plans laid out.”
“We have been fortunate not to experience any significant incidents, but based on what we’ve seen so far, I am confident in their ability to minimise any fallout.”
— Sam Z, Director of IT, a US-based biosciences company