As organizations contend with rising security data volumes and growing pressure to control costs, an independent commissioned Total Economic Impact™ (TEI) study conducted by Forrester Consulting suggests that modernizing security data architecture can deliver significant financial and operational benefits.
The study examined organizations using the Gravwell Security Data Platform (SDP).
Based on interviews with customer decision-makers, Forrester created a composite organization representing a mid-sized, regulated enterprise supporting tens of thousands of users. Over a three-year period, the study found that the organization achieved a 264% return on investment (ROI), $743,000 in net present value (NPV), and payback in less than six months.
According to the analysis, the composite organization realized $1 million in total benefits compared with $282,000 in costs over the three-year period. The largest quantified benefits included a $694,000 reduction in security information and event management (SIEM) licensing and platform costs, along with $288,000 in productivity gains for security analysts.
Gravwell is a full-stack security data platform and data lake that enables organizations to collect and analyze machine data, including logs, network traffic and event streams, to support threat detection, investigations and compliance. Its vendor-agnostic platform is designed to provide complete visibility across security, IT and OT environments while reducing the cost and complexity associated with traditional security data architectures.
“Independent analysis like this carries real weight because, for us, it reflects the experiences of organizations using our platform in production,” said Corey Thuen, CEO and co-founder of Gravwell. “We believe Forrester’s findings demonstrate the measurable value organizations can achieve by modernizing their security data architecture. Whether the objective is to reduce costs, interrogate more data, or improve the efficiency of security operations, the study shows that they don’t have to compromise.”
The study also includes feedback from organizations that have deployed the platform in production.
“We’re getting a million-dollar product for a fraction of the price. And it meets all our needs: data retention, data analytics, data alerting, and real-time alerting. It’s been great for us,” said a director of information security at a private academic institution interviewed as part of the study.
A senior threat response engineer at a financial services organization highlighted the value of complete data retention for investigations:
“It was kind of scary when you really think about it, because we were dropping logs and wondering if the bad stuff was in those logs. Now we can ingest everything and know we’re not missing anything important. Things don’t always get discovered right away, so having the ability to retain more log data and go back further really improves how we investigate and respond to incidents.”
Forrester’s Total Economic Impact™ methodology has been used for more than two decades to evaluate the financial impact of technology investments. The framework assesses technology value across four dimensions, cost, benefits, flexibility and risk, to help organizations better understand the potential business outcomes of technology adoption.
The commissioned study provides additional detail on the operational efficiencies and financial benefits identified through customer interviews.
Join our LinkedIn group Information Security Community!
