A large insurance and reinsurance provider that manages billions of dollars in premiums and serves customers in multiple countries shared their story about improving security processes.
A large insurance and reinsurance provider that manages billions of dollars in premiums and serves customers in multiple countries shared their story about improving security processes. For them, robust, scalable security operations are critical to safeguarding client data. For years, the company has relied on legacy SOAR platforms to automate parts of its security processes. Yet these solutions introduced more problems than they solved, such as limited integrations, frequent disruptions, and cumbersome manual tasks. They required an intuitive, well-supported solution to manage their entire range of security alerts and free up team members for higher-value projects.
BlinkOps delivered that solution, helping them drastically reduce alert handling time, expand automation capabilities, and boost morale among security engineers.
Initially, they turned to traditional SOAR platforms to streamline security workflows. While these tools promised extensive automation, the reality fell short:
Despite years of effort, they only maintained five working automation workflows, each prone to breaking changes. This overhead robbed engineers of time for more strategic initiatives.
They knew they needed a different approach—one that could finally deliver on the promise of automation, rather than burdening the team with endless troubleshooting.
With their legacy SOAR tools falling short, they assessed several alternatives, including Tines. Their requirements included:
BlinkOps quickly emerged as the best fit. Its drag-and-drop workflow builder meant no steep coding requirements. A dedicated engineering support model (including monthly or annual hours) removed the barriers that typically come with statement-of-work engagements.
During a POC, the team built and tested new workflows themselves using BlinkOps' intuitive interface. The platform made sense from the start. Fewer steps were required for each automation, and BlinkOps provided quick assistance when needed, enabling the team to transition from prototype to production faster than ever before.
"BlinkOps is one of those things that I don't dread the calls every week. It gets exciting: what else can we automate?" — Senior Security Engineer
BlinkOps centers on drag-and-drop workflow creation. Instead of writing code, team members can visually outline each step and see the entire workflow at a glance. This approach lowers the learning curve and fosters a do-it-yourself mentality around automation.
They highlight BlinkOps' support model as a key differentiator. Their contract offers an annual bucket of engineering hours to:
This setup reduces reliance on in-house developers and sidesteps the lengthy procurement processes associated with every new project.
When they considered Tines, they concluded it would have similar drawbacks to legacy SOAR:
One of their biggest wins has been reducing alert resolution time from 10–15 minutes down to 30–60 seconds. Using out-of-the-box integrations, analysts can receive and respond to alerts on any device, including their phones. This shift has let them handle high volumes of alerts far more quickly.
"Instead of it taking ten to fifteen minutes, it takes, like, thirty seconds to a minute. That enables the team to do more project work." — Senior Security Engineer
During a recent after-hours incident, a senior leader requested that a malicious domain be blocked. Before BlinkOps, the on-call analyst would have needed to:
With BlinkOps, the analyst simply opened Teams on their phone, selected the relevant workflow, and typed in the domain, blocking it within seconds.
Leadership praised the security team for their speed, and the process became a benchmark for other internal teams seeking to automate their own workflows.
The security team has expanded from just 5 workflows to 30, with plans for many more. The security team no longer wonders if the platform can handle a new idea. Now, they assume BlinkOps can handle it. This cultural shift has encouraged more experimentation and broader use cases, including a self-service portal that allows other IT functions to submit requests directly to the security team's workflows.
Outside of security, teams now look to BlinkOps whenever a new automation idea comes up, even outside of security. Firewall upgrades, IT service requests, and self-service options for non-security functions are all possible areas of growth.
"BlinkOps gives us a platform that's fast, easy to use, and incredibly well supported. The drag-and-drop workflows, built-in integrations, and dedicated engineering hours have allowed us to automate across more use cases than we ever could with legacy SOAR tools. It's helped us respond faster, reduce manual work, and expand what our team is capable of handling." — CISO
The success of after-hours incident responses, along with leadership praise for rapid blocking of malicious domains, continues to generate interest across the organization. More departments are interested in replicating these results for their own workflows, utilizing BlinkOps to automate repetitive tasks and minimize manual effort.
By moving to BlinkOps, the security team broke the cycle of underperforming legacy SOAR platforms. Streamlined integrations, end-to-end automations, and hands-on vendor support allowed the security team to scale from five to 30 workflows. They now respond to alerts in under a minute, freeing up staff for strategic security initiatives.
BlinkOps' intuitive approach optimizes how the security team invests in people and technology across its broader IT environment, providing the speed and flexibility they need to address security issues as they arise.
Discover the full story behind this global insurer's transformation - from struggling with five unreliable playbooks to running 30+ agentic workflows that respond in seconds, not minutes.
Blink is secure, decentralized, and cloud-native. Get modern cloud and security operations today.
.webp)
.webp)
.png)
