How Inductive automation scaled their security operations with Expel

Case studies · Cole Finch · TAGS: Automation & orchestration / Security research

Jason Waits, CISO at Inductive Automation, shares how Expel’s Managed Detection and Response (MDR) has transformed their security posture. As a critical software provider for 69% of the Fortune 100, Inductive Automation needed a partner that could offer 24/7 coverage without drastically increasing headcount.

In this video, discover:

  • How Inductive Automation manages security alerts across multiple time zones.
  • Why “transparency” was a non-negotiable factor in choosing a security vendor.
  • The impact of Expel’s 5-9 minute response time on their peace of mind.
  • How automation allows their internal team to focus on high-impact, strategic projects.

Finding peace of mind with 24×7 security coverage

Expel’s been fantastic for our peace of mind. It’s nice to have someone that we still will be providing that coverage and off hours on holidays. It has prevented us from needing to really scale up the team to a level that wouldn’t make sense for an organization our size.

About Inductive Automation

My name is Jason Waits. I’m the CISO at Inductive Automation. We make SCADA software used by about 69% of the Fortune 100 and every critical sector you can imagine, oil, water, wastewater, nuclear, pharmaceutical, data centers, and more. It’s really important for us to make sure our security program grows and scales with us. We play a very critical role in the supply chain of many of the world’s most important companies. The consequences of a breach with customers like ours could be devastating.

The stakes of securing critical infrastructure

As we continue to scale and grow we definitely got more and more alerts, especially alerts that were coming in after hours or in different time zones. I’ve definitely pulled the team away from strategic work and more long-term projects.

Growing alert volume was pulling the team away from strategic work

I’m not fully sold on the platformization trend that’s going on right now where everyone kind of goes all in on one vendor. So, when looking for an MDR provider, I was laser focused on finding something that would work with our existing stack, which we felt was best of breed. Expel had a great pedigree and a great reputation as being very fast and very pragmatic. We loved their approach of embracing automation and in responding quickly to alerts, and that’s backed up with the metrics and the numbers we see. Most alerts for us that are actioned by Expel are responded to in five to nine minutes. At Inductive we’re big fans of transparency and we look for the same quality in our vendors. Expel exposes their detection logic. It was abundantly clear what was covered and what was not. The Expel auto remediation capabilities have been great for our peace of mind and allows us to focus on proactive work knowing that Expel has our back, especially in the off hours during holidays when coverage is light.

Why Inductive Automation chose Expel as their MDR provider

Overall, we’ve had a great experience with Expel. They’ve been a reliable partner. They’ve been fast, efficient, and effective, and they’ve allowed us to take some of that effort that we’d spend responding to commodity alerts and focus that on truly improving our security posture and reducing our attack surface.


This transcript has been edited for clarity and readability. For more cybersecurity insights and managed detection and response resources, visit expel.com and follow us on social media.

For more testimonials from Expel’s customer base, visit expel.com/customers or see our customer video playlist on YouTube.

Resources home