SafeLabs enables growth and gains competitiveness in cybersecurity with Oracle Cloud

In a competitive cybersecurity market, SafeLabs handles a massive volume of data, which is only increasing as new intrusion techniques and attack types emerge. Having a product capable of processing and analyzing this information in real time and on a large scale is one of the biggest technical challenges. After all, if the system is slow and inefficient in detecting an attack due to poor infrastructure, the information doesn't reach the customer in a timely manner and loses relevance.

SafeLabs owns an innovative SIEM system for correlating national security events and faced no competition nationwide, but had a limitation that hindered their expansion. The company lacked support and visibility into computing resources, in addition to a significant technical barrier. As products grew, the sheer volume of data represented a high cloud infrastructure cost, hampering the company's expansion strategy when it came to scaling the solution. Consequently, this obstacle limited the company's ability to conduct tests with the agility required to evolve the product. In practice, optimization replaced innovation.

Oracle was initially chosen due to lower costs than SafeLabs' previous competitor, enabling the company to launch their product at a competitive price. With their previous cloud solution, costs could have tripled due to increased data volume. The team's technical support for troubleshooting and technical queries, as well as innovation support, was another difference compared to the previous cloud infrastructure provider. A practical example of the partnership came through the first proof of concept. Oracle supported the company not only on the infrastructure side, but on the technical side as well. The support of engineers and architects helped shorten processes and satisfy teams. All of this was combined in a reliable, secure, and easily managed environment, with visibility so non-technical personnel could understand the costs involved. The possibility of storing data in data centers in Brazil, without additional cost, also contributed to the client's decision. All of this reduced latency, brought SafeLabs closer to their customers and comply with the General Data Protection Law (LGPD).

The migration of SafeLabs' cybersecurity products to the Oracle cloud was fast, starting with the most complex product from a data analysis perspective and the most expensive in terms of infrastructure: SIEM. Thanks to the technical team's support during the proof of concept, the migration, which would have taken months, was completed in just one month. After the successful experiment and the lessons learned, the company's three main products were migrated to the cloud within six months. The total cost reduction was approximately 86.5%, allowing resources to be invested in product innovation and improving the performance of technology teams. Consequently, professionals stopped worrying about performance, which increased by 47%, and began working on new features with a focus on innovation.

By streamlining this process, SafeLabs shortened development time and paved the way for two new AI-focused products. These products were the result of an internal research to identify new customer demands, but also the company's learnings from the migration process. SafeLabs is now confident it can deliver faster to end customers, with an improved product quality.

Advantages are significant. The speed of handling a ticket or analyzing an event used to take hours, but now only takes minutes, and offers more efficient responses. Previously, false positives represented over 80% of the total. Currently, of the 100 cases to be analyzed, only 16 are reviewed by a human.

As an example of the cloud's impact on testing and solution development, SafeLabs conducted only two proofs of concept (POC) in 2022, one of which involved development using in-house hardware, not in the cloud. In 2024, the architecture team delivered four POCs in two months, bringing the total to more than eight, including advancements in generative artificial intelligence and the use of more powerful machines with GPU instances for training new products, something that used to be unfeasible.

The work with Oracle's generative AI solution consisted of providing more efficient responses to security incidents based on technical data. In this case, the client continues to have access to technical teams, but can now use the system and request assistance from technology to address any issues encountered. After all, an attack can't take weeks to resolve, and users rely on SafeLabs' expertise to ensure a secure environment while they focus on running their core business without worrying about attacks.