Request demo

Customer story · Defense · Türkiye

A Defense Manufacturer Watches Its Group and Its Supply Chain.

A major Türkiye-based defense manufacturer runs several subsidiaries and a supplier network across the EU, the US and regional partners. Its tools treated each subsidiary as a separate program. The groups that target the sector treat all of it as one target.

  1. Parent EASM

    • Parent (scanned)

  2. Subsidiary brands EASM

    • Subsidiary (scanned)

    • Subsidiary (scanned)

    • Subsidiary (scanned)

    rolled up into one group dashboard

  3. Tier-1 suppliers TPRM

    • Supplier (scanned)

    • Supplier (scanned)

  4. Tier-2 suppliers TPRM

    • Supplier (scanned)

    • Supplier (flagged) (scanned)

    • Supplier (scanned)

    Supplier: compromise seen before the supplier’s own disclosure

CTI nation-state and defense-sector groups

A Perimeter That Grew Site by Site.

A Türkiye-headquartered manufacturer with multi-billion-USD annual revenue across manufacturing, defense services and contracting, whose subsidiary brands operate semi-independently. Its external surface reaches well past the corporate domain, fed from research, operations, partners and acquisitions.

Research

Research Labs

Hosts stood up for individual research projects, added to the perimeter one project at a time.

Operations

Regional Facilities

Manufacturing sites that run internet-facing systems of their own.

Partners

Partner-Integrated Systems

Systems wired into partner networks, which carry the perimeter past the group’s own infrastructure.

M&A

Acquired Entities

Companies that joined the group with infrastructure nobody in the parent had inventoried.

Fragmented Tools Against a Unified Threat.

Subsidiaries on Separate Tools

Each subsidiary brand was monitored with its own tooling, or not monitored at all.

Suppliers on Questionnaires

Tier-1 suppliers were reviewed through questionnaires only.

Intelligence Without Context

Threat actor intelligence came from public feeds, with no framing for the defense sector.

One Platform From Parent to Tier-2 Supplier.

  1. 01

    Portfolios for the group

    The parent and each subsidiary brand became a separate portfolio, rolled up into one group dashboard.

  2. 02

    Discovery across entities

    Asset Discovery went looking for subsidiary infrastructure that the central inventory did not list.

  3. 03

    Suppliers, scanned like the group

    Third-Party Risk Management put tier-1 and tier-2 suppliers under continuous monitoring, in place of annual questionnaires.

  4. 04

    Sector-scoped intelligence

    Threat Actor Intelligence was configured for nation-state and defense-sector groups.

What Changed Across the Group.

A Supplier Compromise, Seen First

Vendor scanning detected a compromise at a tier-2 supplier before the supplier’s own disclosure. Supplier problems now come to light in the scans, not at the next questionnaire.

More of the Surface in View

Discovery brought subsidiary infrastructure into the inventory that the central team had never listed.

Campaigns Tracked as They Run

The team follows actor campaigns against the sector while they are active.

One Group View

Subsidiaries roll up into a single group dashboard instead of separate per-subsidiary programs.

Scored Procurement Gates

Tier-1 and tier-2 suppliers are evaluated against their Deepinfo score.

See Your Group’s Full External Surface.

Book a walk-through that covers your subsidiaries and your supplier tiers.