In this interview, Frank Guilain, Network and Security Systems Manager at the Saretec Group, explains the cybersecurity challenges faced by his team, particularly protecting the websites and sensitive data of their insurance clients. After a disappointing experience with an on-premises WAF solution, Saretec opted for the OGO solution, which offers simpler administration, responsive support, and a better business relationship.
The interview also highlights the importance of customer feedback when choosing a WAF solution, as well as criteria such as data sovereignty and the integration of artificial intelligence to enhance threat detection. In an industry that demands strict security standards, the flexibility of a self-managed WAF solution – one that is easy to deploy and manage – is a major asset for addressing cybersecurity challenges while ensuring regulatory compliance and effective protection against web attacks.
What are the main cybersecurity challenges at Saretec, and how do you approach protecting your websites and data?
“Our cybersecurity challenges are constant and ever-evolving. For several years now, we’ve been working to strengthen our security posture, and choosing a WAF solution became essential to protect our websites and data.
We initially opted for an on-premises solution offered by another provider, but it proved to have its limitations: slow response times from support and a feeling that their sales team had abandoned us. This prompted us to look for an alternative. That’s how we discovered OGO Security. Their solution proved to be easy to manage, with much more responsive technical support and sales service. As a small organization, we need agile and accessible partners who can integrate into our operations without complicating our processes. OGO perfectly met these expectations, unlike other providers.”
In the insurance services sector, cybersecurity is a strategic issue, particularly given the sensitivity of customer data and the growing vulnerability of websites. A Web Application Firewall (WAF) plays a critical role in protecting web applications by analyzing and filtering HTTP traffic to identify and block malicious requests. These solutions are designed to detect common threats such as SQL injections, cross-site scripting (XSS), and denial-of-service (DDoS) attacks, which can compromise data integrity or disrupt critical business operations.
For service companies that handle sensitive data, regulatory compliance is also a key factor. Using a WAF helps meet the requirements of standards such as the GDPR and ISO 27001 by ensuring proactive threat monitoring and continuous protection of digital assets. These solutions also provide visibility into ongoing attacks through detailed dashboards, allowing companies to prioritize responses and adjust their security strategy based on observed trends. This proactive approach is essential for meeting the expectations of insurers, who often require additional assurances regarding data security.
The operational flexibility of a cloud-based WAF is particularly well-suited for small organizations or companies that outsource their technical infrastructure. These managed solutions eliminate the complexity of on-premises deployments, which often require significant human and technical resources. They provide immediate website protection without the need for extensive in-house maintenance, allowing teams to focus on their core business activities. Scalability and behavioral analysis capabilities also strengthen defenses against more sophisticated attacks, ensuring effective security in the face of increasingly complex threats.
Pourquoi avoir choisi de collaborer avec OGO Security dans le contexte de votre projet de sécurisation web ?
“During our research, we compiled a shortlist of service providers and requested customer testimonials for each solution. These discussions with IT professionals in industries similar to ours were decisive. The feedback on OGO was particularly positive and aligned with the user experience we were looking for, with no negative comments or warnings about any issues.
The integration of artificial intelligence into their solution was a differentiating factor, but it wasn’t the deciding factor. What really tipped the scales was their business commitment and how well the solution aligned with our needs. Furthermore, the solution’s data sovereignty was a key factor, as our clients – particularly those in the insurance sector – require that data be hosted in France. This criterion proved essential to our final decision.”
Feedback from existing customers plays a crucial role in choosing a WAF solution, particularly when evaluating performance, ease of integration, and the effectiveness of the services offered. Testimonials from other companies – especially those in similar industries – help validate providers’ claims and provide a better understanding of how the solution performs in real-world situations. This feedback helps identify a solution’s strengths and weaknesses before making a decision, by providing an objective perspective on factors such as the responsiveness of technical support, the user-friendliness of the interface, and the ability to effectively protect infrastructure.
Data sovereignty is another essential criterion, particularly for companies working with clients in regulated industries such as insurance. Compliance requirements, such as those imposed by the GDPR, mandate that sensitive data be hosted in specific jurisdictions. Choosing a WAF solution whose servers are located in countries with clear and strict legislation ensures compliance with security and privacy standards. This criterion is essential for avoiding any legal or regulatory vulnerabilities that could jeopardize customer relationships.
Integrating artificial intelligence (AI) into a WAF solution can also be a major advantage. By using AI to analyze traffic behavior and identify potential threats, these solutions offer a more sophisticated level of protection. AI enables proactive detection, capable of adapting responses based on observed attack patterns, which increases resilience against emerging threats. An AI-based solution is capable of continuously learning and adjusting, thereby ensuring more accurate monitoring and a faster response to unprecedented or more complex attacks.
Can you describe the benefits and results observed following the implementation of the OGO solution?
“We are very satisfied. The solution simplifies the management of our sites while providing excellent protection. It is easy to use, which was a priority for us. We have also found the technical support team to be highly responsive; they answer our requests quickly and accurately.”
A WAF solution provides advanced protection by blocking attacks before they reach websites, while ensuring simple and intuitive management. Through constant monitoring and in-depth analysis of web traffic, a WAF detects and filters threats such as SQL injection attacks, cross-site scripting (XSS), and DDoS attacks. It also ensures compliance with security standards while quickly adapting to new vulnerabilities. By analyzing behavior in real time, it identifies suspicious patterns and can prevent evolving attacks, thereby providing a proactive and robust defense..
Responsive and attentive technical support is essential to ensuring continuous security. Since cybersecurity is a constantly evolving field, incidents can occur at any time. A support team capable of responding quickly, providing concrete solutions, and offering personalized advice helps minimize downtime and ensures rapid incident resolution. An effective support service becomes a strategic partner, offering technical expertise and ensuring that the WAF solution is always optimized to address new threats.
Which features of the OGO solution do you find most beneficial?
“The simplicity and speed of deployment are the most striking aspects. Securing a new site takes just a few clicks and only a few minutes. By comparison, major players offer high-performance solutions, but they’re much more complex to configure. Furthermore, the OGO solution offers a self-managed system that requires no physical installation or lengthy training. This perfectly meets our needs for flexibility and efficiency.”
A self-managed WAF solution offers undeniable advantages in terms of simplicity and speed of deployment. Unlike traditional solutions that require complex physical installations and detailed configurations, a self-managed WAF deploys online with just a few clicks, without the need for extensive manual intervention. The absence of lengthy installation processes and direct integration into the existing infrastructure allow for nearly instantaneous setup, thereby reducing wait times and enabling technical teams to quickly focus on the operational management of cybersecurity..
The solution’s self-management also offers great flexibility, reducing the need for internal resources for administration. Updates and adjustments are generally automated, ensuring that the WAF remains constantly up to date with the latest threat signatures and security protocols. This streamlined approach is beneficial for companies that do not have a large team dedicated to cybersecurity, while offering a solution robust enough to block attacks and monitor web traffic in real time, without requiring complex training or a long-term commitment.
If you had to summarize your experience with OGO Security, what would you say?
“It’s a reliable solution, well managed by a competent and responsive technical team, that simplifies our cybersecurity management while providing effective protection.”
