Case Study: CBTS achieves 13-second incident resolution and 100% incident close-out with Palo Alto Networks' Cortex XSIAM

CBTS resolves incidents in seconds with platformization, featuring Cortex XSIAM

CBTS, a high-technology managed security services provider that spun off from Altafiber in 2024, used the opportunity to rebuild its security stack quickly with a lean team. Facing a complex mix of legacy point products, low automation and visibility, and significant customer-data risk, the organization needed a cohesive platform to enable a Zero Trust posture and reduce SOC toil.

CBTS consolidated on a Palo Alto Networks platform—centered on Cortex XSIAM and augmented by Cortex XDR, XSOAR, Xpanse, VM‑Series, Prisma Access/SD‑WAN, ADEM and CDSS—to unify data and automate response. The results were dramatic: median time to resolution dropped to 13 seconds, incident close‑out reached 100%, SOC tools were consolidated to one, visibility rose roughly 80–100%, about 105 incidents per day are fully automated, and the team achieved these gains while keeping headcount flat.

CBTS

Chris DeBrunner

Vice President of Security Operations