Seeing the building systems endpoint tools can’t
Heating and ventilation
Lighting
Access control
Energy management
Building controllers
Sector
Building management, commercial real estate
Size
Enterprise, part of a large financial-services group
Region
United Kingdom
Partner model
Delivered through a smart-building integrator partner
The business
A UK commercial real estate owner with a portfolio of multi-tenant office buildings. Each building runs its own mix of controllers, often installed and maintained by different contractors.
What we protect
In an office building, the systems tenants notice are the ones that keep the building running: the building management system, lifts, heating and cooling, door access and CCTV. If they fail or are tampered with, tenants feel it first.
These systems rarely take an agent. A passive sensor in each building reads the building automation traffic, lists every controller and camera, and spots default passwords, outdated firmware and devices that appear without notice.
Contractors maintain much of this equipment and log in remotely. Each contractor connection is watched against the normal pattern, and anything new, out of hours or unusually broad is raised.
Vulnerability findings are grouped per building and per contractor, so the partner can pass one clear list of fixes to each. The owner’s office IT, email and staff sign-ins are covered too, with its existing EDR fed in.
How it works
Every building is set up the same way, so the portfolio can be compared side by side. At onboarding, the partner team and our Fractional Security Director agreed which building systems always need a person.
AI sorts and ranks every alert, and our Expert-Led SOC analysts review what it finds. Nothing is switched off by the AI.
Escalations go to the partner team, never to tenants or contractors. The partner decides whether to call the facilities manager, the contractor or both.
Weekly data packs and monthly reports show the state of each building, with notes that can be mapped to ISO 27001.
HOW THE SERVICE RUNS
01
Watch
Sensors and the client’s existing tools feed activity from all five surfaces into one view.
02
AI sorts
AI sorts and ranks every alert and writes down why, so the real threats rise to the top.
03
Experts check
Our expert-led SOC investigates around the clock, with a named Fractional Security Director.
04
Partner team acts
Escalations go to the partner team, never to tenants or contractors. The partner decides who to call.
The combination is the point.
Correlated across five surfaces
Every surface is watched at the same time, so a weak signal in one place can be matched with another.
OpenXDR intelligence layer
One platform that joins up what every surface sees, with AI triage ahead of our expert-led SOC.
Watched
IoT/OT
Building management, HVAC, lifts and access control, watched passively
Watched
Endpoint
Laptops and servers. The existing EDR stays in place and feeds in.
Watched
Network
Traffic inside the network, watched for threats moving between systems.
Watched
Cloud
Cloud and SaaS activity, watched for risky access and changes.
Watched
Identity
Sign-ins, watched for account takeover and MFA abuse.
Outcome
For the owner
Building systems across the portfolio watched in one place
Contractor access no longer a blind spot
Every building set up the same way, so they can be compared side by side
For the partner
A building security service it can offer across every site
Backed by a SOC that knows building systems
The partner decides who to call: facilities manager, contractor or both
More real-world environments
HEALTHCARE
European acute-care hospital
Hospital-safe security monitoring that never puts clinical systems at risk
Read case study →
MANUFACTURING
European beverage manufacturer
One SOC, from the office network to the factory floor
Read case study →
HEALTHCARE
US not-for-profit healthcare provider
Protecting care across many sites, from clinics to community locations
Read case study →
