Case Study: Summit Utilities achieves 91% fewer critical vulnerabilities with Zafran

Summit Utilities Reduces CVSS Criticals by 91%

Summit Utilities, a multistate gas distribution provider, faced significant challenges in its vulnerability management. The company's reliance on Microsoft patch management tools left dangerous blind spots, as many high-risk vulnerabilities aged beyond 30-45 days or fell outside standard severity thresholds, creating unacceptable security gaps. Their process also lacked a streamlined workflow for tracking and assigning remediation efforts. To address this, they turned to the vendor Zafran for its exposure management platform.

By implementing Zafran, Summit Utilities augmented its existing tools without needing new agents. The Zafran platform integrated with Microsoft Defender, enriching vulnerability data with runtime context and internet exposure to uncover hidden risks. This enabled structured, automated workflows through a Jira integration for ticket creation and tracking. The results were substantial, including a 91% reduction in critical vulnerabilities, the elimination of patching blind spots, and the cancellation of plans to buy additional vulnerability scanners, thereby saving budget and reducing tool sprawl.

Summit Utilities

Aaron Baillio

Director of InfoSec