50 petabytes a day. Nothing left on the table.

Allure Security scans tens of millions of pages daily to catch brand impersonation. See how Hydrolix lets it ingest and retain every log at full fidelity for 15+ months, at less than half its previous cost, with insights in under ten seconds.

RESULTS

50% cheaper

<10 seconds

About the company

Allure Security monitors tens of millions of pages of internet content, about 50 petabytes a day. Learn how they use Hydrolix on AWS to keep log data without compromises, sampling, or limits.

The business challenge of big data and sampling

Allure Security provides brand impersonation detection across all digital platforms. The company monitors tens of millions of pages of internet content—about fifty petabytes a day—looking for signals of fake websites. Allure Security’s software monitors the many components of a company’s digital assets, and detects unusual activity that may indicate a brand impersonation. It monitors logos, taglines, fonts and other components that may have indicators of fraud. The company uses log data as part of its operations to keep the components of its software in sync and fast. The logs also show where bad activities are happening and how behaviors are changing.

Some of that log data, however, was getting thrown away due to the cost of retaining data, and log limitations set by Allure’s existing observability provider. Allure had bought a limit of logs. If the log amount crossed that limit, the provider shut off its platform entirely, which led to lost log data. Allure could only use about 30 days’ worth of data with its provider, and had to be conscientious about logging events that may not have been valuable. Also, as the log amount increased, costs spun out of control to the point where it became difficult to run the business in a performant way.

The prohibitive cost coupled with limiting log data created challenges in mitigating persistent impersonation attacks over time. Without ingesting and retaining all log data for an extended period, the company could not identify the root cause of issues nor collect the evidence needed to build a complete story of incidents. It’s also critical to keep all data hot so searching for indicators is fast, a matter of seconds. Allure’s existing observability provider could not deliver data insights quickly enough, causing a loss of certain records.

The solution: full-fidelity data, no compromises

Allure turned to Hydrolix on AWS for the backend of its observability needs. The company continued using its existing provider for its UI but used Hydrolix for log ingestion, long-term retention, and always-hot data for rapid querying and analysis. With Hydrolix, Allure can ingest and retain all log data for at least 15 months and the license fee is less than half of what the company paid its other observability provider.

Hydrolix ingests terabyte- to petabyte-scale data and shows insights within ten seconds, which means Allure can spot indicators of impersonated sites in real time, reducing the time to mitigation. With Hydrolix, Allure doesn’t have log limitations, so it can spot root causes and build an evidential story about incidents.

Results with Hydrolix

  • No logging limitations, ingest full-fidelity data without sampling
  • 15+ month data retention at less cost
  • Ingestion to insights in less than 10 seconds with sub-second queries
  • Spots indicators of brand impersonation in real time to reduce MTTR
  • Better performance at a better price
  • Always-hot data 24-7 customer support

Talk to an expert