Synergy Global Housing provides temporary housing worldwide, on a platform thousands of businesses and consumers rely on every day. They were already running Microsoft Sentinel. What they did not have was anybody to work it.
The problem
Synergy came to us after a poor relationship with another managed service provider. Their previous MSP was not responding to alerts quickly enough, and not on a 24x7x365 basis, which left the resilience of the whole arrangement depending on what time of day something happened.
They were heavily reliant on Sentinel but lacked the resource to manage the alerts it produced. Building an in-house security team was not realistic — the cost is high and keeping good analysts is harder than hiring them. Meanwhile their SIEM data was not being collated or interpreted properly, so insights were being missed and historical data was aging out before anyone had looked at it.
The big guys that are out there seem like they onboard you, then kind of forget about you. We haven’t had that with Wizard Cyber. They’ve still been the same with what they’ve been from day one.
What we did
We onboarded Synergy to our managed Microsoft Sentinel service. That put their environment behind a 24x7x365 security operations centre, with alert triage and threat response running around the clock rather than during whichever hours somebody happened to be at a desk.
The service covers the personnel requirement outright, so Synergy did not need to build a security team of their own. They ended up with a larger and more experienced team than they could have hired, without carrying any of it as headcount.
They also gained access to our own platform, which sits on top of Sentinel and collates what it produces into something a non-specialist can actually read: what is happening in the environment, which alerts are affecting them, and where each one has got to in triage and response.
Onboarding finished ahead of schedule, with a full permissions structure in place.
The results
- No in-house security team required, and none built — which Synergy put at a saving of hundreds of thousands of dollars.
- 24x7x365 monitoring and protection for the Sentinel environment.
- A complete view of alert status, with data insights their own team can use.
- Measurably more effective use of the Sentinel investment they were already paying for.
- Ongoing reporting, so improvement is continuous rather than annual.
I don’t know if anybody else is close to doing what Wizard Cyber is doing. Having Wizard Cyber there by my side as a partner just increases my availability for everything else we can get done.
Mitch Christian — Information Security & Infrastructure Officer, Synergy Global Housing
A note on dates
This engagement began before CYBERSHIELD AI carried the investigation queue, and nothing above is a claim about what the agents did. What has not changed is the part Mitch is describing: the same security operations centre, the same procedures, and a senior analyst still accountable for every customer-facing answer.