Case Study: YX Energy achieves continuous security validation and improved security posture with Cymulate

YX-Energy collaborate better with their SSPs to improve their security posture with Cymulate

YX Energy, part of Uno‑X Energi and operating IT services for hundreds of independent gas stations in Norway, faced the challenge of assuring their outsourced security across a distributed environment. With most security operations handled by service providers and manual penetration tests proving costly and quickly outdated, YX Energy needed a data‑driven way to validate access controls, segmentation and corporate defenses — prompting adoption of Cymulate Continuous Security Validation.

Working with Painkiller, Cymulate was deployed as a Continuous Security Validation service to simulate real attacks, enabling real‑time collaboration with YX Energy’s security service providers. In a PoC a simulated lateral movement was detected and contained by the SOC within 14 minutes; ongoing use of Cymulate has validated segmentation and access controls, improved detection-and-response SLAs, guided Azure appliance selection, provided auditor‑ready reporting for compliance (e.g., SOX), and allowed continuous security testing without in‑house security expertise.

YX Energy

Rene Francis Lares

IT Manager