One DoGood meeting. A vendor he had never heard of. A signed order six months later.
An IT Director at a 1,000+ person law firm
Infrastructure, data protection, security, cloud and endpoints
Name and firm withheld at the member's request.
He runs infrastructure, data protection, security, cloud and endpoints for a law firm of more than 1,000 people. His name and the firm’s are withheld at his request; the firm does not allow vendor endorsements.
Before DoGood put Sprocket Security in front of him, he had never heard of them. Six months after that first meeting he had a signed order, which he calls lightning fast for a firm like his, and an annual penetration test had become continuous review of the environment.
Key takeaways
A vendor he had never heard of, signed in six months. Sprocket Security was not on his radar before the DoGood meeting. New technology at his firm usually takes an exceedingly long time to get from concept to solution. Sprocket filled a specific gap in the security portfolio and was not cost prohibitive.
The gap: an annual pen test and nothing in between. Vulnerabilities surfaced once a year. There was no ongoing visibility into the attack surface, and a single vulnerability can cause significant pain.
He took the meeting for the human component. Findings and recommended remediation come with an iterative discussion. Once his team has done its part, asking Sprocket to validate the fix is a single click in the portal.
Measurably better posture, and findings that stopped looking ominous. Some fixes the team expected to be difficult were made manageable with Sprocket’s suggestions.
“We now have ongoing review of our environment. In the past, we had great insight every 12 months.”
Without the meeting, the gap would still be there. “Honestly, I may be in the same place I was prior to the meeting, with a gap. We are exceedingly busy, and implementing something new can never get off the launchpad.”
In his own words
What does your team own?
I am the Director responsible for infrastructure, data, data protection, security, cloud, endpoint protection, patching, SaaS and IaaS.
What was happening before Sprocket Security?
We relied on annual penetration testing to identify vulnerabilities, and we really had no ongoing visibility into our attack surface. The risk was significant, as a single vulnerability can cause significant pain.
What made you take the meeting through DoGood?
Sprocket Security seemed really focused on the customer. In particular, I liked the human component of the solution: our ability to review findings and recommended remediation, and have an iterative discussion with Sprocket about approaches. Once we did our part, requesting Sprocket to validate our remediation is as easy as a single click in the portal.
Six months from first meeting to a signed order. Why so fast?
New technologies typically take an exceedingly long period of time to move from concept to solution. Sprocket filled a specific gap we had in our security portfolio and wasn’t cost prohibitive.
What results have you seen?
We have improved our security posture measurably. Some findings that we thought would be difficult to remediate were made less ominous with the help and suggestions from Sprocket. We now have ongoing review of our environment, whereas in the past we had great insight every 12 months.
If you hadn’t taken the meeting?
Honestly, I may be in the same place I was prior to the meeting, with a gap. We are exceedingly busy, and implementing something new can never get off the launchpad. Sprocket was a great fit, easy to get up and running, and has been a very pleasurable experience over the last year.
Learn more about Sprocket Security at sprocketsecurity.com.