[Interview] Strengthening cybersecurity in the German market: synaigy's journey to robust protection with OGO Security

In today’s interconnected digital landscape, safeguarding sensitive data and fortifying digital assets against cyber threats are paramount concerns for businesses of all sizes. To shed light on the significance of adopting advanced cybersecurity measures, we spoke with Marc Achsnich, the Head of Cloud at synaigy, a digital service company based in Germany.

In this interview, our expert delves into the critical role of Web Application Firewalls (WAF) in bolstering cybersecurity defenses and ensuring regulatory compliance. Drawing from extensive industry experience, they share insights into their company’s cybersecurity journey, from navigating the evolving threat landscape to selecting OGO Security as their preferred cybersecurity partner. Through their expertise, we gain valuable insights into the intricate dynamics of cybersecurity decision-making, the transformative impact of innovative security solutions, and the imperative of prioritizing data sovereignty and regulatory compliance in today’s digital age.

Could you please introduce your company and the main challenges you’re facing?

“I’m the head of cloud at synaigy, a digital service company in Germany based in Cologne. We’re part of the larger company TIMETOACT GROUP. I’m leading the managed service team, responsible for implementing hosting solutions and ensuring their security and performance.

In the German market, especially, we’ve witnessed a significant surge in cyber attacks, with statistics indicating that 84% of German companies experienced cybercriminal attacks in 2020, resulting in damages exceeding millions. This underscores the critical need for robust cybersecurity measures, particularly in compliance with German data protection laws.

Our commitment to safeguarding customer data prompted us to explore advanced security measures. This led us to prioritize the adoption of a Web Application Firewall (WAF) to fortify our defenses against evolving threats and regulatory requirements.”

A Web Application Firewall (WAF) serves as a critical component of cybersecurity arsenal, functioning as a protective barrier between web applications and potential malicious actors. By scrutinizing incoming web traffic and discerning legitimate requests from nefarious ones, the WAF effectively thwarts several cyber threats, including but not limited to SQL injection attacks, cross-site scripting (XSS), and distributed denial-of-service (DDoS) attacks. Moreover, the WAF operates at the application layer of the OSI model, affording granular control and visibility over web traffic, thereby enabling swift detection and mitigation of suspicious activities.

The implementation of a WAF aligns seamlessly with the overarching objective of regulatory compliance, particularly in the context of German data protection laws. By enforcing stringent access controls, data encryption, and threat intelligence feeds, the WAF ensures that web applications adhere to the stringent data privacy regulations mandated by German legislation, such as the General Data Protection Regulation (GDPR). This not only mitigates the risk of data breaches and regulatory penalties, but also fosters trust and confidence among clients regarding the secure handling of their sensitive information.

How relevant is a WAF to the protection of small and large businesses?

“Regardless of company size, cybersecurity remains paramount. While larger organizations may have more resources to allocate to security initiatives, small businesses are equally susceptible to cyber threats. Therefore, the approach to implementing WAF should be tailored to the specific needs and capabilities of each organization. Small companies may benefit from simplified deployment options and cost-effective solutions, whereas larger enterprises may require more comprehensive and scalable WAF deployments to protect complex infrastructures.”

In the realm of cybersecurity, the importance of implementing robust measures, such as a Web Application Firewall (WAF), cannot be overstated. Irrespective of company size, safeguarding digital assets against malicious cyber threats is a fundamental imperative. Although larger organizations typically possess greater resources to dedicate to security endeavors, small businesses are equally vulnerable to cyber attacks. Consequently, the implementation of a WAF must be customized to accommodate the unique requirements and operational capabilities of each organization.

Small businesses, constrained by limited budgets and personnel, stand to benefit from streamlined deployment options and cost-effective solutions offered by WAF technologies. These solutions are designed to provide essential protection against common cyber threats without imposing undue financial strain. By leveraging simplified deployment models and intuitive user interfaces, small enterprises can swiftly fortify their web applications against a multitude of potential risks, thereby enhancing their overall cybersecurity posture.

Conversely, larger enterprises with complex infrastructures and extensive digital footprints necessitate more sophisticated and scalable WAF deployments. In these environments, the WAF serves as a critical line of defense, safeguarding against an array of advanced cyber threats targeting multifaceted systems and applications. The scalability of WAF solutions enables seamless integration with diverse IT ecosystems, accommodating fluctuating traffic volumes and evolving security requirements. Additionally, advanced features such as threat intelligence integration, behavior-based anomaly detection, and real-time monitoring empower large enterprises to proactively identify and mitigate emerging threats before they can inflict harm.

How did your company manage the protection of clients, and why did you choose OGO Security?

“Previously, we relied on OGO’s competitor for security measures. However, as we transitioned major parts of our infrastructure to OVH Cloud, a leading European cloud provider, we sought a solution that aligned better with European data protection regulations. OGO’s competitor, being a non-European company based in the USA, posed challenges in this regard. We identified OGO Security, a French-based company operating on OVH Cloud, as a suitable alternative. Their adherence to European laws and their specialization in Web Application Firewalls (WAF) made them an ideal choice for ensuring compliance and data sovereignty for our customers.”

As businesses navigate the complex landscape of digital security, ensuring compliance with these stringent standards is paramount to safeguarding sensitive information and maintaining the trust of customers and stakeholders. The selection of a WAF provider that aligns with European data protection regulations is of great importance. Non-compliance with these regulations not only exposes businesses to legal liabilities and financial penalties, but also jeopardizes the privacy and security of customer data. Therefore, organizations operating within the European Union must prioritize solutions offered by vendors that demonstrate a commitment to compliance with regional data protection laws.

How did you discover OGO Security, and for how long have you been in touch with them?

“Our engagement with OGO Security commenced in 2024, coinciding with our strategic shift towards enhancing cybersecurity measures.

I initially encountered OGO Security while exploring the OVH Club Marketplace. This marketplace serves as a collaborative platform facilitated by our shared hosting provider, OVH, as well as OGO Security. The overarching objective behind this initiative is to foster synergy among customers and products within a unified ecosystem. By consolidating services on a singular platform, both OVH and OGO aim to streamline accessibility and ensure compatibility, thereby optimizing overall performance. The Marketplace’s user-friendly interface facilitated my search for specific solutions, leading me to explore web application firewalls (WAF), where I discovered OGO’s offerings.”

What makes you confident in OGO Security’s approach?

“My confidence in OGO Security came from their innovative approach to cybersecurity, leveraging AI-driven solutions to detect and mitigate threats effectively. Their thorough testing methodologies, such as web application scans against industry standards like OWASP Top 10, demonstrated robust security capabilities. Furthermore, their proactive response mechanisms, such as behavior-based blocking, instilled confidence in their ability to safeguard our infrastructure and data.

In evaluating OGO’s competitor’s approach to security, we observed differences in their handling of requests compared to OGO Security. OGO’s competitor tends to focus on blocking individual requests, whereas OGO adopts a more holistic approach, aggregating requests and analyzing user behavior to identify and address potential threats more effectively. This distinction underscores OGO’s emphasis on proactive threat mitigation and user-centric security measures, aligning closely with our priorities and objectives.

Also, pricing was a significant factor in our decision-making process. OGO’s competitor operates on a fixed pricing model, where users may start with a free plan but encounter significant jumps in pricing as they scale up or require advanced features. In contrast, OGO Security offers a more flexible and request-based pricing structure, with scalable pricing based on traffic. As their traffic requirements increase, they can scale up accordingly, with pricing adjustments reflecting the growth. This approach ensures cost transparency and scalability, aligning well with our customers’ evolving needs.”

The significance of selecting a high-quality provider for a Web Application Firewall (WAF) solution in cybersecurity cannot be denied. A reputable provider not only offers advanced security features but also demonstrates a commitment to compliance with relevant data protection regulations, particularly within the European Union.

OGO Security exemplifies the attributes of a trusted WAF provider, earning confidence through its innovative cybersecurity approach. Leveraging AI-driven solutions, OGO Security employs sophisticated threat detection and mitigation techniques to safeguard against evolving cyber threats effectively. Their methodology includes comprehensive web application scans aligned with industry standards such as OWASP Top 10, ensuring robust security measures are in place.

Unlike the approach of the previous supplier, OGO Security adopts a more holistic strategy towards threat management. While the former provider primarily focuses on blocking individual requests, OGO Security takes a broader view, aggregating requests and analyzing user behavior to identify potential threats proactively. This user-centric approach enables OGO Security to detect and address threats more effectively, aligning closely with the evolving cybersecurity landscape and the needs of organizations.

What makes you change providers now ?

“The decision to switch from the former provider to OGO Security stemmed from our evolving needs for European-compliant security solutions. The availability of OGO Security on the OVH Cloud Marketplace presented a timely opportunity to align our security measures with European regulations. Additionally, OGO’s specialization in WAF and their innovative approach to threat detection and response convinced us of their suitability for our requirements.

The former provider holds a prominent position in the market as a leading provider of cybersecurity services. However, OGO Security stands out in its specialization, particularly in the realm of web application security. While OGO’s competitor offers a broad portfolio of services, including CDN, Bot Management or Image scaling, OGO’s focused expertise in web application firewalls (WAF) distinguishes it as a preferred choice for businesses prioritizing application security. Moreover, OGO’s European base and alignment with data protection regulations resonate with our vision of ensuring compliance and data sovereignty for our customers.”

In a few words, how would you sum up your overall opinion of OGO Security?

“OGO Security exemplifies European performance in cybersecurity, offering robust solutions tailored to the unique needs of companies and their customers.”