About the customer

Lomax is one of Denmark’s largest multichannel office supply companies serving over 50,000 business customers and processing over 350,000 orders every year. Their ecommerce website stocks over 30,000 products and plays a crucial role in delivering frictionless customer experience and sustaining business growth.

Services Used

The Challenge for Lomax

Ecommerce websites main targets for hackers

Online retailers are prime targets for cyberattacks. As the business expands online, Lomax needed to step up their security maturity and better confront the risks they face in order to prevent business disruption. Kim Millard, IT Manager of Lomax explains “our customers rely on our services to meet their office supply needs 24/7. We knew we needed to address the new threats and protect our business and operations as a priority.”

To protect profitability and their customers data they needed to ensure every aspect of the IT operations is tested and monitored to deliver the best customer experience.

Millard adds “if our website suffers downtime and can’t serve our customers when they need it, it will force them to look elsewhere. This is not an option. We cannot compromise on security and risk being attacked; therefore, we’ve moved from ad hoc pen tests to continuous application security assessment from Outpost24 to protect our ecommerce operations and ensure it runs smoothly.”

Before Outpost24 they used to conduct annual penetration testing, however we quickly realized testing just once every year was not enough to keep up with the evolving threats such as megacart and malware. Lomax needed a new security testing approach to continuously assess and monitor their website for vulnerabilities. As the risk of data breach increases, the business case of investing in a more robust application security testing solution made perfect sense – “ad hoc pen testing was taking too long to arrange and get the results, we didn’t feel confident that our website was being checked enough for new threats hence the need for change.”

Reduce application risks and optimize resource

Day to day the Lomax IT team are focussed on ensuring the smooth running of the ecommerce website. With limited security resource, they needed a solution provider that will help embed security testing into the IT operations and automating the process, plus providing the guidance they need to interpret the findings in a meaningful way and resolve security issues identified. “During the vendor selection process we felt very encouraged when we saw what Outpost24 SWAT has to offer – a unique combination of automated application security scanning and manual penetration testing in a single solution, like no others to provide complete coverage.”

“Implementing Outpost24 has saved our team a lot of time and effort from managing day to day vulnerabilities, allowing us to better understand the risk posture and enabling us to prioritize more effectively. We used to find information gathering and action planning very time consuming, however, with the zero false positives guarantee our IT- and online team now have more time to plan and focus on fixing real issues and ensuring the website runs smoothly so there’s no downtime.”