Industry: Renewable Energy Semiconductor Manufacturing

Basis is focused on accelerating the clean-energy revolution by redesigning the way people interact with energy in their homes. Their goal is to create sustainable, human-centered solutions that address climate change and rising household energy costs. As an early-stage start-up, Basis is focused on delivering a secure and resilient product while meeting industry security and compliance standards.

Challenge

AWS native tools, including the Well-Architected Framework, offered a valuable baseline, but Basis needed additional capabilities to align with their hybrid infrastructure and fast-paced development cycles. Other security vendors provided one-size-fits-all solutions or reduced their ability to self-serve and rapidly iterate. 

With a small team and strict resource constraints, Basis needed:

🔹 Better security visibility across AWS services.
🔹 A streamlined compliance process for SOC 2 and ISO 27000.
🔹 Proactive security insights to protect against IoT attack vectors.

Solution‍

Basis chose Plerion for its ability to deliver deep security insights, prioritize remediation, and integrate seamlessly into their CI/CD processes without rigid security frameworks.

Key reasons for selecting Plerion included:

🔹 Tailored onboarding experience, ensuring an easy transition from AWS native tools.
🔹 Significant time savings in identifying and remediating security risks.
🔹 Early warnings for potential security threats, such as unauthorized bastion host creation.
🔹 A compliance-friendly dashboard, streamlining evidence collection for SOC 2 and ISO 27000 audits.

Key benefits

With a small team managing security, Basis needed a solution that prioritized critical risks while reducing manual effort. Plerion has helped bridge the gap between security and other teams by:

🔹 Prioritizing remediation based on urgency, effort, and security impact. “It’s been a huge time saving and it allows me to look into the key AWS services that we need to remediate, ranked by urgency and effort to implement versus security gains that balance" says Adrian van deen Boom, Systems Lead.
🔹 Highlighting key security issues in AWS services that might otherwise go unnoticed. "Things like AWS Inspector or AWS Config that we keep running in the background, I wouldn't typically be proactively looking at, whereas Plerion highlights the key things to remediate in such services," Adrian adds.
🔹 Providing a single dashboard for security, operations, and compliance teams to track risks and evidence, streamlining SOC 2 and ISO 27000 audits.

By surfacing critical insights and automating prioritization, Plerion has helped Basis stay ahead of security threats without adding operational overhead.

Results

Since implementing Plerion, Basis has achieved:

🔹 60% reduction in attack path surface area and more than 30% reduction in overall cloud risk posture.
🔹 Enhanced risk visibility, helping Basis stay ahead of AWS security changes and proactively manage threats.
🔹 Improved compliance readiness for SOC 2 and ISO 27000, with a single pane of glass for evidence collection. 
🔹 Reduced time spent on manual security assessments, allowing the team to focus on high-impact security improvements.

‍Find out more

Want to learn more? Book a demo and see what it’s like to have real help, not just another dashboard.