“Now, for most websites, we do not need to bring in external resources. We can run Invicti, run tests and review scans as many times as we need. As a result, the budget we spent on pentesting services each year almost immediately fell by around 60%, and the following year it fell even further, to around 20% of our initial spend.”
Brian Brackenborough
CISO
Headquartered in London, Channel 4, a British television brand, first went on air in November 1982. Channel 4 is available across the UK and operates the country’s largest free-to-air streaming service, All 4, as well as a network of 12 television channels.
The channel has a unique funding model, being supported by commercial sources while remaining publicly owned. This enables it to offer independent, unique and universal content that reflects the interests of different communities in the UK.
A large organization with thousands of web assets, Channel 4 is responsible for the security of the data of 26 million viewers of the All 4 service and all of the company’s intellectual property.
This also means responsibility for the security measures, testing which is usually a very complex and expensive task, taking a huge amount of money from the organization’s security budget.
A solution was sought to test Channel 4’s security
To confirm compliance with the GDPR, which is in force in the European Union, Channel 4 needed to demonstrate the security of its data. The company needed to ensure that robust security protocols and technologies were in place to protect against threats.
To be able to do this, Brian Brackenborough, CISO at Channel 4, was looking for a solution that would allow the company to test its security effectively and within its security budget.
Before using Invicti, Channel 4 spent significant amounts of money each year on numerous penetration tests, using the services of many third-party companies.
“We do a penetration test and get the results; then we work through the issues and pay for another penetration test. It can be a cycle depending on how complex the project was.”
Brian Brackenborough
CISO
Invicti helps Channel 4 keep assets under control
To improve efficiency and reduce costs, Channel 4 needed a simple way to monitor its assets so they could protect them. It was also important for the client to have visibility into all applications, including any that were lost, forgotten or hidden.
The Invicti solution accomplished this task by allowing the client to prioritize a particular resource and create a comprehensive list of all web assets.
Using Invicti, Channel 4 can now perform continuous automated vulnerability scans on websites that store sensitive information, or look for weaknesses in any other web resource of the company.
Increased efficiency and cost savings
The result of implementing Invicti’s WAS solution is significant efficiency gains and huge cost savings. Working with Invicti allowed Channel 4 to reduce costs by 60% in just the first year. And over the next year, they saved an additional 20% of the initial amount.
“This makes our lives much easier and allows us to ensure that projects are delivered on time and within budget.”
Using Invicti, Channel 4 can now perform automated penetration tests or vulnerability scans. This allows Channel 4 to detect any flaws at an early stage, prioritizing the most risky vulnerabilities, and fix them with less manual effort – without having to go back to redesign or refactor.
