Playtika have been pioneers in the games industry for over a decade, and have more than 34 million monthly active users. The Israeli-based multinational organisation are continually adding innovative games with challenges and thrills at every twist and turn.
Until recently, Playtika were relying on a managed security operations centre (SOC) to support their global cybersecurity operations. The third-party SOC provider – and the two embedded Playtika analysts – were struggling to quickly identify, prioritise, and respond to security incidents. And the problem was getting worse.
Liran Sheinbox, Head of Cyber Security, Playtika, explains, “When our IPO was announced in January 2020, that number tripled. We were too slow to respond to this growing volume of incidents. We also lacked a consistent response. Each time there was a phishing attempt, for example, we would respond in a different way. That fragmented approach delayed our reaction.”
With the gaming industry moving so quickly, change was needed fast. “We wanted a consistent, holistic approach to cybersecurity, using modern technologies like AI and automation to efficiently safeguard the organisation, ” explains Liran.
Liran and his team identified the need to reimagine security operations – to move away from a traditional manual and reactive approach to an efficient, progressive stance as part of a broader security transformation strategy. Playtika’s requirements included:
Playtika have standardised on the Palo Alto Networks portfolio as part of their enterprise-wide security transformation programme. The comprehensive, connected cybersecurity portfolio helps prevent successful cyberattacks by using an automated approach to deliver consistent security across cloud, network, and applications.
For Playtika, the portfolio spans ML-Powered Next-Generation Firewalls (NGFWs) network security, Prisma Cloud for cloud security posture and cloud workload security, GlobalProtect to safeguard remote working, and the vital component of this security transformation programme, Cortex XSOAR.
Cortex XSOAR provides modern security orchestration, automation, and response that help Playtika reinvent security operations using artificial intelligence (AI) and automation to detect, investigate, and respond to threats.
The deployment of Cortex XSOAR coincided with the decision to bring the SOC in-house. The SOC now monitors data collected from the ML-Powered NGFWs in the data centre, from thousands of endpoints, and from other sources – leveraging automation and playbooks to transform how the five-strong SOC team manages security operations.
One innovation is the Cortex XSOAR chatbot. If an incident occurs, an automated decision tree determines the subsequent actions, with the chatbot notifying users of progress. Liran explains, “If someone requests a password reset, for instance, the bot asks, ‘Did you request this?’ If they didn’t, a new playbook launches to automate the security process. It’s quick, secure, and doesn’t need any intervention.”
Cortex XSOAR is freeing Playtika to operate and innovate with speed and safety. “Cortex XSOAR supercharges our SOC efficiency,” says Liran.
The benefits of security orchestration include:
“Palo Alto Networks Cortex XSOAR enables the art of automation,” says Liran. “The platform provides powerful detections and alerts to drive orchestrated workflows. This ultimately helps us create exciting, compliant video games more quickly and at lower risk.”