Challenge.

EDEKA Rechenzentrum Süd Betriebs GmbH wanted to further develop its IT security strategy and establish a modern approach to risk minimization. The aim was to proactively increase the security of the IT infrastructure. The company was looking for a tool that would not only identify vulnerabilities, but also validate them through a real test - just like a real attacker. EDEKA wanted to continuously monitor the IT landscape and have potential risks assessed from the perspective of a real attacker in order to prioritize and eliminate vulnerabilities in a targeted manner.

With Pentera, we have taken a decisive step forward. Instead of just identifying vulnerabilities, we now carry out attacks from the perspective of real threat actors. This allows us to realistically assess risks and optimally adapt our security measures. Pentera shows us exactly what needs to be done and thus offers us real added value. In this way, the services we offer are secure at all times. With Pentera, the security assessment runs continuously, around the clock, and shows what has changed in the system. The collaboration with Bechtle was a complete success.

Fabian Ebner, Team Leader Network & Security/SOC, EDEKA Rechenzentrum Süd Betriebs GmbH

Solution.

Bechtle and EDEKA have been working closely together for a long time. This also applies to the area of security. When EDEKA wanted to go one step further in the security of its data centers, Bechtle introduced Pentera, an innovative solution for vulnerability analysis. Pentera carries out real attacks and then prioritizes the vulnerabilities identified. EDEKA was immediately impressed by the depiction of realistic attack scenarios. This enables the EDEKA Group's data centers to evaluate and reassess possible risks from the perspective of a potential attacker and derive further attack possibilities. Pentera offers automated security validation and reduces false positives so that resources can be deployed in a more targeted manner. The continuous security evaluation takes place around the clock, which means that new vulnerabilities are detected immediately. Pentera attacks automatically and shows which points of attack need to be improved in order to prevent ransomware. The platform replaces conventional manual tests with automated, continuous penetration tests, which significantly increases the efficiency of security measures. Pentera also provides a clear prioritization of which measures should be implemented first, enabling a targeted improvement in IT security. Pentera is now an integral part of EDEKA's IT security strategy in order to stay one step ahead.

Benefits.

  • Security assessment 24/7:  Continuous monitoring of the IT infrastructure.
  • Automated tests: Supplements and optimizes manual penetration tests.
  • Simple integration: Can be easily integrated into ongoing operations
  • Realistic attacks: Simulates attacks like real threat actors.
  • Ransomware protection: Detects and prevents exploitable vulnerability chains.
  • Traceable: Reports and results are easy to understand.
  • Risk prioritization: Evaluates vulnerabilities according to actual risk.
  • Fewer false positives: Minimizes unnecessary alerts.
  • Flexible: Temporary data collection for targeted optimizations.