Expel

“It boils down to the fact that our employees know that when they submit an email for investigation, it’s done quickly, they’re updated and aren’t left to wonder if something is safe or malicious,” he says. “We get peace of mind, our employees get it, too, and everyone wins.”

“We had an employee who was a little too liberal with reporting potential phishing attempts, and Expel flagged it for us so we could help educate her on what to look for before reporting,” he notes. “The team at Expel has also been great about sharing the processes and evaluation criteria it uses with our security analysts to help them better understand how Expel Phishing works. It’s been great for us.”

“An attempted phish used to put us back on our heels and into ‘crisis’ mode while we figured out what was going on,” the VP recalls. “Expel eliminates that crunch. We know Expel has a handle on the work, and the recommendations they deliver are simple. There’s no ambiguity—we take the remediation steps and are back in business.”

“I’d say we were spending 10 or more hours per week manually investigating phish reports,” he recalls. “Now, we spend practically no time investigating—since the Expel team handles that heavy lifting, and we simply take action on the back of Expel’s recommendations. The whole process is a lot faster.”

“We pay a lot of attention to the dashboard in Expel Workbench; it’s clear and easy to understand, and we even report that data to our CISO (chief information security officer) and board,” he explains. “In an industry where phishing is a big threat, knowing that we have Expel looking at our posture, making recommendations on how to strengthen it, and providing metrics around our phishing readiness helps us all sleep better at night.”

“Expel takes over the heavy lifting with experts that use their automation tech to handle attempts. Now we get detailed directions on what’s happening and what to do so we can close the books on the incident fast, reducing the chances that a phishing attempt spreads.”

“After we saw how easy it was to set up Expel Phishing—and then how the team investigated and remediated phishing attempts—it was an easy choice to bring Expel on,” says the VP. “Expel gave us a lot of confidence around a part of our security operations that was previously a weak spot.”

“Expel was easy to work with from the beginning,” he recalls. “The team was very forthcoming and open about the technology. They agreed to a proof-of-concept, and everything that followed was simple and seamless. They worked with us to connect all our systems where they needed visibility, and even Slack for easy communication and collaboration. We were impressed—and encouraged—from the start.”

“Absolutely. Expel knows the world of cybersecurity, the team will take the time to understand what your team is trying to accomplish, and they will work with you to make it happen.”

“There’s no way we could have achieved everything we have in our security strategy without a partner who really understands what we’re trying to accomplish,” McIntyre says. “Expel supports our vision, not just in the security realm, but throughout our business.”

“The way Expel has tuned its rules for our cloud infrastructure gives us peace of mind that we simply didn’t have before.”

“Folding our SIEM into Expel Workbench gives us a more comprehensive view of our Microsoft 365, Defender, and Azure Active Directory ID security events and alerts,” McIntyre notes. “Together, they enable faster and more accurate incident response. And with more streamlined workflows and less manual effort, we gain back valuable time to address other security needs.”

“Every conversation we had with Expel was productive,” says McIntyre. “The team worked to ensure that any changes we made anywhere in our security stack wouldn’t have unexpected or negative outcomes, and vice versa. It was like we had a built-in system of checks and balances.”

“Expel showed interest in providing a great product and were invested in getting to know us, as a team. They shared our philosophy for security operations, and demonstrated an understanding of our overarching goals,” notes McIntyre. “We loved how Expel took the time to get to know our environment and understand our pain points. The team knew exactly where they could help uplevel our detection and response capabilities.”

“Having Expel allowed us to beat our mean time to remediate (MTTR) by more than 60%. And more importantly, since Expel has eyes on these alerts, our team had the flexibility to get out of the alert queue and focus on maturing our security capabilities,” McIntyre explains. “With Expel, we’re again being creative and thinking critically about how security can support the business. Frankly, it was a big relief—it just wasn’t possible without Expel.”

“Go with Expel. Just do it. Expel is a true ‘unicorn’ in the MDR space and is so easy to work with. Place your trust in Expel. You’ll be glad you did.”

“As interest in air travel moves back to pre-pandemic levels, we need to be ready to accommodate more flyers, flights, and employees—in the air and on the ground—to make flying with us as delightful and memorable as it’s always been. Expel helps ensure our security capabilities are up to the task.”

“Being a small team means that we don’t have the bandwidth to move from tool to tool, screen to screen, manually gathering data and intel on alerts,” the cybersecurity leader explains. “We log into Workbench, and it’s all right there. Ongoing service checks ensure the data is flowing into Workbench correctly and it flags any issues with integrations. We always know we’re getting the right data, in the right place.”

“I’m not exaggerating when I say that Expel saves our team hours every day,” the cybersecurity leader says. “With our legacy provider, we were constantly checking their work, manually managing data, and questioning their findings. We don’t do that anymore. Expel has proven that its people and technology deliver on its promises. Expel handles the majority of issues, and if they escalate something to us, they pair it with remediation recommendations. We worry a lot less that we’re missing an indicator of ransomware or a major threat.”

“There’s no doubt about it—I sleep better at night knowing Expel is here to support us, and we’re a better, more modern security team with Expel on our side. But the bigger benefit is that we’re in a far better position to support our strategic goals for company growth.”

“The fact that I can talk to my team at Expel—and vice versa—quickly and at any time of the day or night is so valuable to our team,” the cybersecurity leader notes. “Between the seamless collaboration, the integrations with our security tools, and the improved quality of the data we’re getting from our security stack, Expel is delivering a peace-of-mind we didn’t previously think possible.”

“Visibility was a huge concern for us,” the cybersecurity leader remembers. “Previously, we were buried under alerts, and between alert volume and the need to re-triage constantly, we were always concerned with what we could be missing. It had an impact on our incident response capabilities. Expel integrates with our existing tech and unlocked a whole different level of visibility for us. And the fact that Expel has a team of analysts responding to incidents for us has been a breath of fresh air.”

“The way that Expel approached all the things that were important to us—from visibility and how alerts are handled, to triaging and collaborating on Expel Workbench™—was perfect for our needs. We were excited about having a modern, innovative, and proactive solution at our fingertips. What we didn’t know was that the best was yet to come.”

“Ransomware is one of our biggest security concerns. When they step onto one of our planes, our passengers place a lot of trust in us. And everytime they book a flight, make a payment, login to our app, or visit our website, they’re trusting us with their most personal information. We can’t let something like ransomware—or any security threat—impact our operations or challenge our customers’ trust and safety. We absolutely must have the right threat detection and response capabilities in place to protect against these threats.”

““Looking ahead, our focus is on continuously improving our integration timelines,” Soman explains. “We’re working closely with Expel to streamline the onboarding of new security tools and capabilities. This agility is crucial in the rapidly evolving fintech landscape.””