Industry: Critical Infrastructure
Company: Gasnetz
Location: Germany
Company Size: 501-1000 Employees
Product: Invicti Enterprise
“Given the large number of mission-critical web applications, not all of them can be tested manually. This is where Invicti comes in, automating regular security checks.”
Gasnetz Hamburg GmbH
Erik Krupke, IT Systems Engineer
Gasnetz Hamburg GmbH and Stromnetz Hamburg GmbH manage joint IT operations for the electricity and gas grid of Hamburg, Germany. Managing such critical infrastructure, the Gasnetz IT team sees a significant need for security for core web applications.
Protecting Critical Infrastructure with Modern Security Tools
As the operator of Hamburg’s critical infrastructure, Gasnetz must pay special attention to the security of its web applications. Shared IT operations between Gasnetz Hamburg GmbH and Stromnetz Hamburg GmbH meant they previously relied on legacy systems to manage their web applications with outdated security measures.
“Previously, we didn’t have an automated security solution. Now, Invicti supports us with unified automated tests and has enabled us to quickly gain insight into highly critical web applications.”
Furthermore, their team regularly conducts labor-intensive manual penetration tests, meaning they have less time to work on more innovative functionality projects. Because the team constantly manages a large number of applications, some programs had not undergone regular audits before implementing Invicti.
Freeing up valuable time and resources with the Invicti platform
The Gasnetz team knew they needed automated solutions to ensure security audits are performed at regular intervals, gain greater clarity on existing and patched vulnerabilities, and achieve deeper coverage across their entire web application.
“We have already integrated our critical web applications into Invicti and can quickly validate changes to web applications. This has freed up resources for other tasks.”
Since integrating Invicti, they can quickly and efficiently validate and update their critical applications, removing unnecessary burdens from the security team and providing developers with accurate and up-to-date information.
Strengthening Security for More Comprehensive Coverage
One of the most significant benefits the Gasnetz team experienced when implementing the Invicti application security testing solution was the ability to close gaps in coverage. They successfully automated security checks at the right time for their development process, all performed through a centralized platform with visibility into past and current weaknesses requiring attention. Invicti’s customer support team was available to assist every step of the way and continues to provide valuable assistance where needed.
“Invicti’s support team always provided prompt feedback and was able to find solutions in all situations.”
With a clearer view of the overall security posture, everyone has the same information. The organization’s developers now have comprehensive documentation at their fingertips to keep up with security. Automated scanning capabilities and Jira integration also remove some of the manual work from their security programs, allowing them to focus on more important tasks.
Automated Security Checks for a Modern AppSec Approach
With Invicti, Gasnetz regained control over misallocated employee resources and outdated security systems. By using the Invicti platform to replace labor-intensive work with regular automated security checks, they save valuable time and resources that they can then use for other critical security needs and innovative projects that help support their infrastructure.
