Cybersecurity in the IT sector: The Cegeka story

Cegeka Group, a European IT solutions, services, and consultancy company, wants to keep track of and control its attack surface at all times. This is especially crucial in their mergers and acquisitions strategy. Philippe Michiels, CISO at Cegeka Group, explains:

Cegeka is a very dynamic company, with a lot of clients, projects, and an IT infrastructure. We also want to see substantial growth, partly by pursuing mergers and acquisitions. Which requires us to be very flexible towards our threat attack surface, and to keep it under control at all times.

With Sweepatic’s External Attack Surface Management platform, the company is able to monitor its external perimeter continuously.

Philippe Michiels: Mapping the external threat surface has always been a key aspect for me, as a CISO. Which is why I had multiple contact moments with Sweepatic. We are particularly interested in the seeding from the domain names because this provides us with an additional dimension on the attack surface of Cegeka.

Combining the Sweepatic EASM solution with targeted external threat-hunting tests, like penetration tests, provides the threat hunters at Cegeka with multiple points of view that can be leveraged for rapid response.

Philippe Michiels: We combine the Sweepatic EASM Platform with other scanning tools, which gives us a complimentary and much more complete picture.

For the cybersecurity team at Cegeka Group, this is also the main benefit of External Attack Surface Management and the Sweepatic Platform:

Philippe Michiels: The added value of Sweepatic lies in the way we implement it. We mainly deploy it through our security office, where we primarily look for non-compliance, and resolve that. A second way of usage, complementary to penetration testing, is our external threat-hunting tests that we frequently perform. Our threat hunters specifically make use of Sweepatic to detect and use different perspectives.