Case Study: Grant Thornton - Exabeam

Grant Thornton Partners with Exabeam to Meet the Needs of the Russell 2000

Financial Services

The Challenge

As an international collection of independent audit, tax, and advisory firms, Grant Thornton must meet the challenge of working with customers at different points in their cybersecurity journey. Some customers might be in the process of handling an ongoing incident or breach without sufficient infrastructure, while others are trying to understand what steps to take to make sure their organization isn’t the subject of tomorrow’s front-page headlines. Because Grant Thornton focuses on the Russell 2000—the high end of the middle market—their customers demand an affordable solution that isn’t going to take years to be designed and deployed.

The Results

Grant Thornton decided to partner with Exabeam because they need a solution that is reasonably priced, can be deployed quickly, and sustain their predicted growth without constant cost increases. They typically complete an Exabeam system integration within just one day, and then start seeing meaningful results within a few weeks as baseline behaviors are established through user and entity behavior analytics (UEBA). Grant Thornton typically recommends that their customers deploy the full Exabeam suite of products, but they primarily focus on the Exabeam Data Lake and Exabeam Advanced Analytics.

Designed for Effective Use by Users at All Levels

Grant Thornton wants their customers to immediately recognize the value of their implementation, and the integrated Exabeam user interface—in particular, the Session Timelines—conveys that value in an easy-to-understand manner. Even non-technical users can understand the way each event appears alongside its time and location, with all critical data in one place to enable an instant response.

Helping the SOC Achieve its Charter

One of many aspects of the Exabeam solution is the Data Lake. Creating a central repository that contains all of the data that the tool needs means that analysts don’t have to waste their time looking for issues across multiple tools. And the tight integration with Advanced Analytics means that the answers to security issues are surfaced automatically, without the need for highly-skilled analysts doing deep, time-consuming manual investigations.


Exabeam is very open to comments from the clients, recommendations from us as partners, and they're very open to actually integrating those requests into the products. They have rolled those recommendations in within weeks, which is an amazingly fast pace for a company that is very methodical about releases…

Don Sheehan

Director, Cyber Defense Solutions