Case Study: Energie Suedbayern (ESB) achieves 60% time savings and easier IT Security Act compliance with Rapid7 InsightVM and InsightIDR

Does your business really have an on-off switch? This company can't have one

Energie Suedbayern (ESB) is a Southern Bavarian energy provider serving 120,000 households with about 350 employees. Facing a large, complex environment (≈2,000 IPs), limited IT staff, and the legal requirement to meet Germany’s IT Security Act, ESB needed a solution that provided built-in intelligence to detect anomalous activity and support compliance—not just log collection or rule-based alerts.

ESB deployed Rapid7 InsightVM and InsightIDR (one agent, centralized reporting) after a successful proof-of-concept and works-council approval. The integrated platform unified vulnerability management and detection/response, sped incident investigations, reduced false positives, and simplified reporting—delivering roughly 60% time savings for the IT team, lowering risk over time, and making compliance and executive communication much easier.

Energie Sudbayern (ESB)

Benjamin Nawrath

Information Security Officer