Reduced latency and increased visibility accelerate time to action

With Splunk solutions, Delivery Hero can identify and resolve security threats and performance issues faster than ever. Splunk Cloud Platform lets Delivery Hero’s security team investigate, monitor, analyze and act on its data with unprecedented ability to detect anomalous activity. 

Compared to its previous on-premises deployment, Delivery Hero now has reduced latency with Splunk Cloud Platform, creating a more accurate and up-to-date picture for the company’s global security team. “When Splunk was being used on-premises, it would be centralized in a single location,” says Mauro Papa, director of information security at Delivery Hero. “The impact of this would be varying latencies for teams situated across the globe.” 

As a part of their migration to Splunk Cloud Platform, Delivery Hero increased the scope of logs they were ingesting to serve more use cases. No longer having to manage the on-premises deployment freed up valuable time to focus on the expansion to more use cases. “Before, we only used Splunk for on-premises logs, so we didn’t have the ability to detect these misconfigurations,” says Papa. “Now Splunk covers our whole multicloud environment, which helps us gain a wide scope of visibility and fix problems within minutes. We’re now able to detect many anomalies that we weren’t able to in the past.”

Customized reporting saves time and improves accountability

Splunk Cloud Platform’s centralized control supports a growing number of data sources without unnecessarily occupying security team resources. For example, a streamlined and customized alerts system means Delivery Hero wastes less time on unnecessary alerts and troubleshooting. “We’ve been able to use Splunk to customize our alerts, which has reduced false positive rates,” Papa says.

Beyond detecting and notifying, the Splunk platform also helps provide more comprehensive metrics and reports for stakeholders. With Splunk Cloud Platform, reports can be created in real time, scheduled to run at any interval and used in dashboards. “We’re able to keep track of all of our vulnerabilities and send reports to each of the owners so that they can keep on top of the performance of their applications,” Papa says.

This is particularly important for maintaining accountability and performance across Delivery Hero’s global security team. Papa says, “We have different security teams across the globe, so it’s crucial that everyone is able to access their own reports and alerts and make improvements.”

The platform’s customizable and easily accessible dashboard simplifies this monitoring process for team members. On top of this, seamless plugins improve the connectivity of performance data points. For example, Splunk is integrated with project management tool Jira so that the team can track and measure KPIs.

Focusing on threats that matter

Splunk Cloud Platform removes the burden of time-draining infrastructure maintenance from Delivery Hero’s security specialists, who can now focus on optimizing performance. 

“Splunk Cloud Platform has enabled the security team to focus on security, rather than infrastructure maintenance,” Papa says. “Now our security engineers are really focused on configuring new indices, drawing on insights from our new dashboards and putting new detections in place.”

To continue to match its global growth, the next step for Delivery Hero’s security team is to implement Splunk Enterprise Security for data-driven insights at scale — insights that will help the company fulfill its mission to “deliver anything” to its customers. The strong partnership with Splunk will help Delivery Hero maintain its heroic status across an ecosystem that spans 70 countries and four continents — and growing.