client success stories

Case Studies

Real Deep Forest Security engagements. Real outcomes.

DFS client success stories

Proven in the Field

The following case studies are synopses of actual DFS engagements. Deep Forest Security will not divulge client identities due to confidentiality requirements.

01 Airline Transportation

Preventing Further Breaches

DFS was engaged by an IT provider to assist an airline transportation company that had previously suffered two cyber intrusions — one of which culminated in a ransomware attack that stopped operations for multiple days, incurring several tens of thousands of dollars in lost revenue. After performing only a basic assessment, DFS identified that several key security controls were missing or inadequate. As a result, the client engaged with the IT provider to implement 2FA, upgrade their remote access solution, and segment their Wi-Fi from their internal corporate network. The client also engaged DFS to provide a managed network threat detection and response solution that utilizes unsupervised AI to identify and automatically respond to anomalies in cloud, email, and network traffic, shutting down identified compromises typically within 2–3 seconds. The client is also exploring the adoption of DFS's AI-powered cyber security awareness training service to further reduce the likelihood of compromise from phishing attacks originating from trusted partners.

02 Oil & Gas

Identifying “Lost” Machines

DFS was engaged by an oil and gas company to perform a vulnerability scan of the organization's externally facing Class B network address space. Reporting capabilities in commercially available tools were unable to accommodate the large number of machines being scanned, resulting in DFS creating our own reporting engine that can handle arbitrarily large numbers of targets and create succinct, prioritized reports that enable IT analysts to quickly identify and remediate the most severe security risks. As a part of the scanning process, DFS not only identified several high-severity vulnerabilities, but also located a machine that — through staffing attrition — had been lost by the client, still attached to the network. The client was able to remediate all high-severity findings and decommission the abandoned machine, reducing their attack surface.

03 Community Healthcare

Evolving Security Posture & Compliance

DFS has been engaged by a small community health clinic on a continuous basis over the years to perform security risk assessments that help the clinic meet HIPAA Security Rule compliance and MIPS attestation requirements. As a result, the client has engaged with their IT provider to upgrade several obsolete servers, migrate their email to Microsoft M365, and modify firewall configurations to enforce minimum-necessary network access. The clinic also engaged with DFS to develop a security management plan containing numerous information security policies and associated procedures to further enhance security posture and HIPAA compliance.

What we stand on

Four Basic Principles

Confidentiality

All work we do for every client is held in the highest confidence. We don't advertise past clients or use their reputations as references — instead, we stand on our own credibility and experience. We select our employees and contractors on a referral basis, each undergoing a background check prior to employment, and all are bound by strict non-disclosure policies.

Innovation

The solutions Deep Forest Security provides produce cost-effective, useful results. Sometimes that means taking a less traditional approach to solving issues — but we never recommend a solution that hasn't been proven through past experience.

Integrity

We strive to deliver results on schedule and within budget, with open, honest, and constant communication so everyone is aware of all expectations and issues. If a deadline is going to slip, we'll tell you before it happens and plan the best approach to minimize impact. If we don't know the answer to a question, we'll tell you as much. Fulfilling our commitments is of the utmost importance.

Education

We believe educating our clients about information security is the critical factor in realizing true security improvement. We strive to provide useful information and guidance during every engagement, and will jump at any chance to provide formalized training when needed.

Information assurance

Your Data, Protected Like It's Our Own

Given the sensitive nature of many DFS engagements, great care is taken to protect client data from unauthorized disclosure. Our analysts operate on a need-to-know basis, with all client data protected by segregated networks, file permissions, and a security model actively evolving toward complete zero-trust. DFS also maintains established policies for the proper classification, handling, and destruction of sensitive information.

$2MGeneral liability insurance policy

$1MErrors & omissions insurance policy

Zero-TrustSecurity model our practices actively evolve toward

GET STARTED WITH DFS

Want Results Like These for Your Organization?

BOOK A CONSULTATION TODAY