Orange Cyberdefense improves SOC efficiency by 33% across 5,000 clients
Orange Cyberdefense built Lupovis into the base offering of its Micro-SOC service, which covers more than 5,000 clients. Its analysts now see reconnaissance against client networks earlier and deal with fewer low-fidelity alerts.
MSSP · SOC efficiency
.png)
SOC efficiency
Get research and insights on the vulnerabilities attackers are exploiting and what they mean for your defences.
Summary
Orange Cyberdefense built Lupovis into the base offering of its Micro-SOC service, which covers more than 5,000 clients. Its analysts now see reconnaissance against client networks earlier and deal with fewer low-fidelity alerts.
At a glance
- Scale: Over 5,000 clients
- Integration: Micro-SOC environments
- Deployment: Fully managed
- Year: 2025
Headline results
- SOC efficiency improved by 33%, with fewer false positives and better triage
- Activity linked to APT and ransomware actors identified during the reconnaissance phase
- Security operations supported during the Paris Olympics, showing which sectors and geographies were under active threat
The challenge
Orange Cyberdefense operates one of the largest SOC environments in Europe, supporting over 5,000 clients. With an attack surface that broad, traditional tools gave limited visibility of threats operating just outside client perimeters.
The team wanted to cut the volume of low-fidelity alerts reaching analysts and see probing activity more clearly. The aim was to identify threats before they developed into breaches.
The solution
Lupovis is delivered as a shared service across the Orange Cyberdefense client base, which keeps it cost-effective at this scale. Malicious activity seen against one client is correlated across the whole base, and the resulting intelligence feeds directly into the Micro-SOC environments. Around major events such as the Paris Olympics, attention shifted to the sectors and geographies drawing most attacker interest.
What changed
Analysts now work from confirmed adversary behaviour, which has improved accuracy and reduced fatigue across national SOC operations. Leaked credentials and exposed services have been detected early enough for proactive containment.
[purple-block-start]
The outcome
Real-time threat trends also shape the advice Orange Cyberdefense gives its clients, including focused patching and risk communication.
[purple-block-end]
"We deploy the Lupovis platform to enhance all of our Micro-SOC customers, enriching threat intelligence and accelerating incident response to stop threats before a breach."
Matthieu Deniel, Manager Avant-Vente & Innovation Micro-SOC, Orange Cyberdefense
