boxxe x IBM

Although our customers all have varying security needs, it’s boxxe’s mission to make all of them as safe as possible. The customers we deal with tend to have 5 or 10 people who are security inclined, though not necessarily experts in analysing or dealing with threats. With attack vectors changing rapidly, the need for proactive protection has never been greater. 

According to Charlie Kemp, our SOC manager extraordinaire, attackers augmented by generative AI (gen AI), are becoming more sophisticated at finding weaknesses or deceiving users. For example, there’s been a rise in hyper-convincing, highly-targeted phishing emails, which can influence people to click – such a small action can lead to massive consequences. 

In order to identify and act on ever changing threats before they affect customer operations, Kemp’s SOC team decided to implement IBM Security ®QRadar® software. With this, boxxe can take advantage of its AI-based automations for greater speed, and its ability to integrate with practically any system or platform for the widest possible visibility.

boxxe used an earlier version of QRadar for several years, but when considering how to further enhance our security capabilities, we needed to evaluate a variety of different threat detection and response solutions. IBM Security QRadar SIEM on cloud combined with IBM Security QRadar SOAR came out on top, offering what the SOC team felt were the best tools for tackling today’s security challenges.

IBM aren’t the only ones offering certain capabilities, but they do stand out in the way they deliver. For example, other tools have user behaviour analytics (UBA), but the machine learning and the AI behind IBM’s solution have been well developed, making it much easier for the SOC team to use. The same goes for QRadar’s security orchestration, automation and response (SOAR) and unified analyst experience (UAX) capabilities… They’re not necessarily new, but they are far ahead of other offerings. With IBM’s tech we’re now capable of mitigating advanced threats that we may not have been able to detect previously.

IBM’s multifaceted support also factored into our decision to go with their solution – as an IBM Business Partner we were able to take advantage of IBM’s Build Fund, an IBM Partner Plus financial assistance program, and receive a discount on our purchase. IBM’s Expert Labs helped with implementation and provided a readily available expert to answer questions and help solve challenges as they came up.