Dwidaya Scales Security Operations Without Building a 24×7 SOC

Summarize this customer success story with AI:

Ask ChatGPTAsk GrokAsk PerplexityAsk ClaudeAsk Google AI

About Dwidaya World Wide

Dwidaya World Wide, operating under the Dwidayatour brand, is one of Indonesia’s long-established travel agencies, serving leisure and corporate customers through its nationwide network.

Hundreds of employees rely on business applications, customer information, booking systems, and external travel supplier systems to support day-to-day operations and deliver travel services.

Cybersecurity Challenges

1. Growing Digital Complexity: Dwidaya was introducing more integrations, cloud services, automation, and AI across the business. This broadened the attack surface and created more potential gaps for attackers to exploit, making the environment harder to secure consistently.
2. Endpoint Protection Alone Was Not Enough: Dwidaya wanted to strengthen endpoint security, but recognized that improving endpoint protection alone would not address the entire operational challenge. Suspicious activity still needed to be monitored, investigated, and acted on.
3. Limited 24×7 Coverage: Dwidaya’s internal IT team primarily operated during normal business hours, while security threats could emerge at any time. Providing continuous monitoring, investigation, and response around the clock would require significantly more internal security manpower.

“Our technology environment is becoming more complex, but our internal IT team cannot keep watch around the clock. That concerned me, because security threats don't stop when our workday ends.”

Ronny Winoto · Chief Technology Officer, Dwidaya World Wide

Sangfor Solution

To address these challenges, Dwidaya turned to Sangfor Athena MDR. What attracted the company most was its ability to combine managed security expertise, endpoint protection, and network visibility in one integrated solution rather than relying on separate products, platforms, and providers.

“We did not want one vendor for endpoints, another platform for monitoring and a separate SOC provider trying to connect everything. That integrated model made sense for our team.”

Ronny Winoto

Athena EPP provides advanced endpoint protection with native telemetry, while Athena STA provides critical network visibility. This endpoint and network information feeds into the MDR platform, where Sangfor security specialists use the combined context to monitor for suspicious activity, investigate incidents, and support response when required.

Solution architecture: MDR-led security model integrating endpoint and network telemetry.
High-level conceptual workflow based on the customer account and supporting solution information.

The Business Case

Beyond the security rationale, Dwidaya also needed to justify investment in the solution from a business perspective.

“When we propose a cybersecurity investment, management asks what value it brings. That can be difficult to show when security is doing its job and nothing happens.”

Ronny Winoto

The company considered what a serious cybersecurity incident could mean for its operations — including downtime or disruption, financial loss and recovery costs, and damage to customer trust and reputation. It also considered what it would take to build and maintain its own 24×7 SOC over time.

Continuous security coverage: two approaches

For Dwidaya, MDR offered a way to strengthen security without having to build and maintain the entire 24×7 security capability internally.

Business Value & Outlook

For Dwidaya, the MDR-led model has changed how security work is shared between its internal IT team and Sangfor’s security specialists. The result is broader security coverage, better visibility, and less day-to-day security work resting on the internal team.

• Security Coverage Beyond Business Hours: Athena MDR extends security monitoring beyond Dwidaya’s normal business hours, with security specialists available to investigate suspicious activity and support response when needed. This reduces the company’s dependence on the availability of its internal IT team and gives it greater confidence in maintaining security coverage around the clock.
• Better Security Visibility: Dwidaya reports better visibility across its endpoints, while Sangfor’s security specialists can draw on endpoint and network context when investigating suspicious activity. This gives the company a clearer understanding of security issues when they arise and greater confidence in how they are being handled.
• More IT Capacity for Strategic Priorities: Instead of working through every security event itself, Dwidaya’s internal IT team can focus on issues that genuinely require its attention. This reduces the day-to-day security workload and allows the team to devote more time to digital transformation and other strategic initiatives.

“We now have better visibility across our endpoints. When something suspicious happens, there is a team that can help us investigate and respond. Our internal team can focus on the issues that actually need our attention, rather than working through every event ourselves. That reduces the workload and gives us more confidence as we continue to transform the business.”

Ronny Winoto

Looking ahead, Dwidaya plans to continue transforming its customer journey and internal operations through digitalization, automation, data, and AI. Each new initiative brings new opportunities, but also more to protect. As its technology environment continues to evolve, Dwidaya looks forward to continuing its partnership with Sangfor to help security keep pace with innovation.