Industry
Energy and utilities
Employees
55,000+
Region
Ukraine, Eastern Europe
THE CHALLENGE
Alert overload, expanding risk, and protecting critical infrastructure
Founded in 2005, DTEK Group is the largest private investor in Ukraine’s energy sector. The group powers millions of homes and businesses through coal and natural gas extraction, thermal, solar, and wind generation, electricity distribution, retail supply, and wholesale energy trading.
With over 55,000 employees, four data centers, more than 2,000 servers with just under 90% virtualized, and a growing public-cloud footprint, DTEK Group’s digital ecosystem is a key part of Ukraine’s critical infrastructure. Their essential role in powering an entire nation underscores why comprehensive security is an urgent strategic priority.
“Keeping Ukraine’s lights on is a mission that leaves no room for cyber compromise. Our security must be as resilient as our energy network,” says the head of the information security department at MODUS X, DTEK Group’s dedicated internal enterprise IT and cybersecurity team ensuring protection and resilience across their infrastructure.
“TrendAI™ is now our strategic cybersecurity partner.”
Head of information security department
MODUS X (DTEK Group)
While a legacy endpoint detection and response toolset was once all DTEK Group needed to eliminate a wide variety of malware attacks, it couldn’t handle the multistage, intelligence-driven attacks that are now being used to target critical infrastructure. To make matters worse, the group’s security analysts also had to juggle separate consoles for endpoints, servers, email, and cloud services.
“We were staring at hundreds of alerts a day with no unified context. Legacy tools left blind spots we simply couldn’t tolerate when nation-state adversaries probe our grid every day,” says the head of the information security department at MODUS X (DTEK Group). Meanwhile, the company’s rapid shift toward Kubernetes-based microservices and expansion into public cloud instances introduced new attack surfaces that its old platform could neither monitor nor protect.
On the operational side, each new security service also required a separate license SKU, leading to cost overruns, budget unpredictability, and protracted procurement cycles which are an unacceptable friction point in a wartime economy. As a result, DTEK Group needed a single, scalable solution that could combine XDR-level analytics, hybridcloud reach, and more flexible licensing to accelerate protection without ballooning complexity or cost.
THE SOLUTION
Unifying, strengthening, and accelerating security operations
“TrendAI outperformed every competitor and backed it up with local experts who understand both our environment and our urgency,” says the head of the information security department at MODUS X (DTEK Group).
A rigorous proof of concept (PoC) with several leading vendors showed that TrendAI™ delivered unmatched detection quality and scalability both on-premises and across DTEK Group’s cloud assets. Comprehensive coverage and an extensive roadmap, including the concept of zero trust network access (ZTNA) and interaction control instruments with AI platforms, also aligns perfectly with DTEK Group’s hybrid architecture and long-term strategy.
Business benefits
- 35% faster detection and response
- Lower operating costs
- Uninterrupted critical infrastructure protection
The group implemented an integrated stack of on-premises solutions and cloud services from TrendAI™, providing their security teams with comprehensive risk visibility, evaluation, and prioritization.
These include using TrendAI™ Apex One for desktop malware protection, TrendAI™ Deep Security™ to secure critical workloads, and TrendAI Vision One™ Email and Collaboration Security to analyze and prevent threats in Microsoft 365 services.
The TrendAI™ Deep Discovery™ suite also helps them detect targeted attacks by sandboxing any suspicious objects before analyzing them. Plus, TrendAI Vision One™ Container Security lets the group track and prevent threats in service development, while TrendAI Vision One™ Cyber Risk Exposure Management (CREM) empowers them to predict, surface, and proactively respond to potential cyberattacks as early as possible.
“With single, unified and consolidated TrendAI Vision One™ platform, we gained end-to-end visibility—from particular behavior on each workplace and covered services, including Microsoft 365 and Kubernetes, to hybrid-environment datacenters—so we can neutralize threats before they disrupt the energy supply,” adds the head of the information security department at MODUS X (DTEK Group). The industry-leading AI security platform’s flexible credit-based licensing also lets DTEK Group scale protection on demand.
RESULTS
Since deploying TrendAI™ solutions, DTEK Group has used behavioral analytics and in-memory detection to block advanced threats at the earliest possible stage. Threat investigation times have dropped by roughly 35% by leveraging correlated telemetry from TrendAI Vision One™. “We’ve cut investigation time by more than a third and expanded protection across every workload, all while simplifying our toolset,” says the head of the information security department at Modus X (DTEK Group).
“We’ve cut investigation time by more than a third and expanded protection across every workload, all while simplifying our toolset,"
Head of information security department
MODUS X (DTEK Group)
Looking ahead, DTEK will extend its TrendAI™ protection to additional Kubernetes clusters, and plans to run a PoC of the TrendAI Vision One™ Zero Trust Secure Access (ZTSA) capability to secure their remote operations. They will also cover critical OT environments by leveraging cyber risk exposure management capabilities in TrendAI Vision One™ for continuous security posture improvement.
“TrendAI™ is now our strategic cybersecurity partner,” says the Head of Information Security Department at MODUS X (DTEK Group). “Next, we’re rolling out Kubernetes more and implement ZTNA protection to stay ahead of an ever-evolving threat landscape.”
ABOUT TRENDAI™
TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk. Trusted by the largest enterprises and governments across 185 countries, TrendAI™ secures the entire organization, from identities to infrastructure to data.
AI Fearlessly.
Join 500K+ Global Customers
Get started with Trend today