Case Study: Visma achieves automated threat detection and empowered security teams with Recorded Future

Visma Combats Threats, Automates Security, and Empowers Teams With Security Intelligence

Visma, a Norway‑headquartered IT and cloud services MSP made up of more than 145 companies and thousands of developers and employees, needed a way to centrally defend a highly distributed, acquisition‑driven environment while empowering product teams to own security. After evaluating options, Visma piloted and adopted Recorded Future’s security intelligence platform (including analysis from Recorded Future’s Insikt Group) to give developers analytics, automation, and actionable threat context across the organization.

Recorded Future delivered real‑time threat intelligence, surface‑level detections (like typosquat domains), and deep incident analysis that helped Visma detect a targeted APT10 intrusion at the moment of exfiltration and, together with coordinated blue team efforts, prevent client data compromise; Recorded Future’s Insikt Group provided attribution. Today hundreds of Visma teams use Recorded Future to continuously monitor customized watchlists, automate manual security tasks, prioritize incidents faster, and streamline M&A due diligence and onboarding — embedding intelligence-driven security across the business.

Visma

Espen Johansen

Director