CYGNUS BOX NOW Success story

In the fast-moving world of e-commerce logistics, BOX NOW stands out as a multinational innovator in last-mile delivery. With more than 50,000 locker boxes spread across five countries, BOX NOW ensures seamless parcel delivery to millions of consumers.

However, operating at this scale presents unique challenges: monitoring thousands of distributed endpoints, securing vast data flows, and maintaining uptime across borders. To address these challenges, BOX NOW partnered with CYGNUS Technologies, implementing a tailor-made, Elastic SIEM–powered security visibility solution that brings together real-time analytics, threat detection, and full transparency.

Key Features & Capabilities:

  • Centralized Log Management: Aggregates logs from all locker endpoints, backend systems, and infrastructure components (including on-prem, private and public cloud) into Elastic’s distributed datastore.
  • Custom Dashboards & Data Views: CYGNUS built tailored dashboards for BOX NOW’s security and operations teams, enabling quick insights and faster decision-making.
  • Scalable Architecture: Elastic’s flexible design allows BOX NOW to keep growing and adapt to new needs everyday
  • AI/ML assisted Real-Time Detection: Elastic SIEM’s machine learning–based anomaly detection identifies suspicious activity instantly, leveraging and constantly training heavy models (i.e. detecting DDoS attacks very early by processing all Http requests).
  • Proactive Smart SOC/SOAR Service by CYGNUS: A powerful SOC team triaging alerts and optimizing detection rulesets 24/7/365.
  • Full support and engineering resources by CYGNUS: The solution is enhanced, upgraded and maintained daily by CYGNUS’ skilled engineering team.
  • Powerful Threat Intelligence Insights: Ranging from proactive DDoS prevention to detecting potential cyber exposure risks, CYGNUS CTI team provides early warning and mitigation on various risk areas.
  • Multiple Fail-Safe Processes & Intelligent Ticketing: All log ingestion is closely monitored for disruptions and CYGNUS’ customized Jira Service Management solution enables powerful ticket management for each detection.
  • Dynamic Playbooks: To further elevate operational efficiency and accelerate response times, CYGNUS integrated Dynamic Playbooks and Adaptive Decision Trees into BOX NOW’s security and operations workflow. Built on top of Elastic SIEM’s capabilities and enriched with CYGNUS’s network defense expertise, these playbooks act as intelligent response frameworks that guide teams through every stage of an incident — from detection to resolution.
  • Automated & On-Demand Reporting: Customized automated reports are sent at agreed intervals. These can vary from high level executive reports and statistics, to detailed technical insights.
  • Customer portal with monitoring health: CYGNUS Customer portal offers insights on monitoring infrastructure health and statistics.

The Results

CYGNUS SOC and Elastic SIEM deployment transformed how BOX NOW manages and secures its operations providing:
Unified Visibility
All infrastructures — from edge locker devices to cloud infrastructure and web — are now monitored in real time under unified views, featuring searchable parsed logs.

Strengthened Security Posture

Elastic SIEM provides continuous analysis and correlation of security events, empowering CYGNUS SOC, and BOX NOW’s security team to detect and mitigate threats proactively.

Faster Incident Response

Automated alerts and intuitive dashboards reduce mean time to detect (MTTD) and mean time to respond (MTTR).

Operational Efficiency

Unified log access streamlines non-security oriented troubleshooting and optimizations as well, improving uptime and customer satisfaction.

Customer Perspective

“Partnering with Cygnus for the SOCaaS transformed our security operations.
We gained real-time visibility, confidence, control and clarity over our infrastructure.
A team with very high expertise providing seamless services and trust.”

Papadomanolakis Kyriakos
Group Cyber Security Officer
BOX NOW