Apps Run The World Apps Purchases

Customer	Industry	Empl.	Revenue	Country	Vendor	Application	Category	When	VAR/SI	Insight Source
Iren Group	Utilities	11862	$4.1B	Italy	Microsoft	Microsoft Defender	Endpoint Detection and Response (EDR)	2023	n/a
Iren Group	Utilities	11862	$4.1B	Italy	Security Scorecard	Security Scorecard Platform	Endpoint Management	2023	n/a	In 2023, Iren Group implemented Security Scorecard Platform for Endpoint Management, a deployment that began in November 2023 and remains ongoing. The engagement is centered in the corporate cybersecurity and threat intelligence function at Iren S.p.A, where the Security Scorecard Platform is used as part of risk management and cyber rating activities within the Endpoint Management category. Configuration work included cyber rating configuration, vulnerability assessment workflows, and Saved Queries tuning for threat intelligence correlation. Security Scorecard Platform was paired with Qualys and Skybox for vulnerability assessment and management, and configuration activities extended to dashboard creation and search tuning in Splunk to support alert triage and incident response automation. Python scripting was used to automate IOC and threat bulletin ingestion into the threat intelligence stack and to operationalize routine rule tuning tasks. The implementation integrates explicitly with SIEM and orchestration and detection technologies, including Splunk and Splunk SOAR as a PoC integration, XDR engines Microsoft Defender and Trend Micro, and threat intelligence feeds Anomali ThreatStream and Recorded Future. Real-time alert monitoring flows feed Security Scorecard Platform inputs, and identity context is provided via Microsoft Azure Entra ID, while messaging and email protections such as Proofpoint contribute telemetry for endpoint risk scoring. Operational governance emphasized incident response handling, vulnerability bulletin creation with external law enforcement and national CERT inputs such as ACN, POLIZIA POSTALE, and CNAIPIC, and OSINT workflows. Process changes included formalizing saved query rule tuning, SPLUNK correlation rule development, and ongoing cyber risk rating procedures under ISO 27001, NIST, and ENISA best practices, with the Security Scorecard Platform serving as the central Endpoint Management signal for cyber rating and remediation prioritization.
	Banking and Financial Services	11856	$1.6B	Colombia	Fortra	Fortra Agari Phishing Defense	Secure Email Gateways (SEGs)	2020	n/a
	Banking and Financial Services	11856	$1.6B	Colombia	Microsoft	Microsoft Entra ID (formerly Azure Active Directory)	Identity and Access Management (IAM)	2023	n/a
	Banking and Financial Services	11856	$1.6B	Colombia	Amazon Web Services (AWS)	Amazon WAF	Web Application Firewalls (WAF)	2024	n/a
	Banking and Financial Services	11856	$1.6B	Colombia	Aranda Software	Aranda EMM	EMM / MDM / MAM	2016	n/a
	Professional Services	11830	$2.7B	Russia	Microsoft	Microsoft Entra ID (formerly Azure Active Directory)	Identity and Access Management (IAM)	2024	n/a
	Professional Services	11800	$2.4B	United States	Fortra	Fortra Agari Phishing Defense	Secure Email Gateways (SEGs)	2020	n/a
	Professional Services	11800	$2.4B	United States	Proofpoint	Proofpoint Email Security and Protection	Secure Email Gateways (SEGs)	2017	n/a
	Professional Services	11800	$2.4B	United States	Mimecast	Mimecast Email Security	Secure Email Gateways (SEGs)	2020	n/a

Logo

Customer

Industry

Empl.

Revenue

Country

Vendor

Application

Category

When

VAR/SI

Insight

Insight Source

Iren Group

Utilities

11862

$4.1B

Italy

Microsoft

Microsoft Defender

Endpoint Detection and Response (EDR)

2023

n/a

Iren Group

Utilities

11862

$4.1B

Italy

Security Scorecard

Security Scorecard Platform

Endpoint Management

2023

n/a

In 2023, Iren Group implemented Security Scorecard Platform for Endpoint Management, a deployment that began in November 2023 and remains ongoing. The engagement is centered in the corporate cybersecurity and threat intelligence function at Iren S.p.A, where the Security Scorecard Platform is used as part of risk management and cyber rating activities within the Endpoint Management category. Configuration work included cyber rating configuration, vulnerability assessment workflows, and Saved Queries tuning for threat intelligence correlation. Security Scorecard Platform was paired with Qualys and Skybox for vulnerability assessment and management, and configuration activities extended to dashboard creation and search tuning in Splunk to support alert triage and incident response automation. Python scripting was used to automate IOC and threat bulletin ingestion into the threat intelligence stack and to operationalize routine rule tuning tasks. The implementation integrates explicitly with SIEM and orchestration and detection technologies, including Splunk and Splunk SOAR as a PoC integration, XDR engines Microsoft Defender and Trend Micro, and threat intelligence feeds Anomali ThreatStream and Recorded Future. Real-time alert monitoring flows feed Security Scorecard Platform inputs, and identity context is provided via Microsoft Azure Entra ID, while messaging and email protections such as Proofpoint contribute telemetry for endpoint risk scoring. Operational governance emphasized incident response handling, vulnerability bulletin creation with external law enforcement and national CERT inputs such as ACN, POLIZIA POSTALE, and CNAIPIC, and OSINT workflows. Process changes included formalizing saved query rule tuning, SPLUNK correlation rule development, and ongoing cyber risk rating procedures under ISO 27001, NIST, and ENISA best practices, with the Security Scorecard Platform serving as the central Endpoint Management signal for cyber rating and remediation prioritization.