Veralto Achieved Under One Minute Mean Time to Contain with GreyMatter Agentic AI
Veralto is a global leader in technology solutions, safeguarding the world's most vital resources: water, food, medicine, and essential goods across the global supply chain
The Challenge and Outcome
- 14 operating companies, each with its own IT environment, tech stack, and operational context
- Manual triage required analysts to correlate data across disparate systems—taking days to weeks
- Limited capacity for proactive security or strategic initiatives beyond the SOC
- Threat volume and speed outpacing what manual processes and human intervention could handle
- 94% of alert noise eliminated, surfacing only what warrants attention
- Mean time to contain reduced from weeks to under 1 minute
- Executed 154 automated threat hunts in one quarter vs. 10 in the previous year
- Empowered analysts to lead M&A security, vulnerability management, and cyber risk quantification
Overview
Protecting a global company the size of Veralto means securing 14 operating companies, each with its own environment, tech stack, and operational context. A security event at one company looks completely different from the next, and Veralto’s security team is responsible for detecting and responding across all of them.
14 Environments, One Security Team
Before GreyMatter, Veralto’s security team was operating manually across 14 distinct environments. Every alert required hands-on-keyboard investigation, cross-team coordination, and hours of research just to determine if a threat was real. Response times stretched to days or even weeks while attack volume and speed continued to climb. The team’s most skilled analysts were locked into reactive incident response with no bandwidth for proactive work or strategic initiatives.
When Veralto separated from its former parent company in late 2023, Propes saw an opportunity to reset. ReliaQuest had previously been restricted to flagging issues, with no authority to act, leaving GreyMatter’s agentic AI capabilities untapped. Propes changed that immediately.
"We told our teams early on, you need to take your hand off the wheel and let GreyMatter drive."
Philip PropesGlobal Chief Information Security Officer, Veralto
From Days to Seconds with GreyMatter Agentic AI
With GreyMatter fully operational across all 14 environments, Veralto's security operations look nothing like it did a year ago. GreyMatter ingests roughly 62 billion events per month, eliminates 94% of alert noise, and autonomously handles the correlation and pattern-matching to tie indicators together and determine severity in seconds.
"Our mean time to contain dropped to under one minute—which is absolutely remarkable. This is because we've worked out all the kinks in advance,"
Philip PropesGlobal Chief Information Security Officer, Veralto
The impact compounds from there. With routine work handled autonomously, Propes can rotate analysts across functions, build new expertise within the team, and create development opportunities that didn't exist when the team was locked into reactive response.
"GreyMatter has allowed us to scale our people to address issues that matter, to craft something custom for us that works in our environment with all of our disparate environments, and empowers our people to do things beyond traditional SOC duties to really level up our team as a whole." Propes said.
Learn How GreyMatter Agentic AI Scales Your Security Operations
GreyMatter is an agentic AI security operations platform with 6 agentic Teammates that use hundreds of agent skills and AI tools to work toward an objective, not just tasks.
