Success Story

Accelerating Healthcare Innovation 

Samsung Life Insurance Partners with Qualys to Protect AI-Powered Digital Services  

Download PDF

A subsidiary of the Samsung Group, Samsung Life Insurance is South Korea’s largest insurance company.  

6K

Employees

Founded 1957, Seoul, South Korea

Offices in China, Thailand, and the USA  

Website

Summary

To help deliver high-quality care for South Korea's aging population, Samsung Life Insurance is building a comprehensive senior living offering, including a brand-new digital health management platform powered by smart devices and AI.

Products

CyberSecurity Asset Management (CSAM), TotalAppSec, TruRisk Eliminate, Vulnerability Management, Detection & Response (VMDR)

Pull Stats

98%

reduction in Time To Remediate

1M+

vulnerabilities detected to date 

Business Background

As the company embarked on their transformation journey, it looked for a way to better protect sensitive personal, financial and healthcare data within an increasingly complex threat landscape.

Given the sharp increase in cyber threats, including the uncertain impact of new frontier AI technologies such as Anthropic's Claude Mythos, it's never been more important to take a proactive approach to cyber incident response. With Qualys, we can now identify vulnerabilities at machine speed and prioritize their remediation with greater precision and efficiency.”

General Manager, Samsung Life Insurance

Business Challenge

  • Discover vulnerabilities across endpoints, on-premises servers, and multiple AWS, Azure, and Samsung Cloud environments  
  • Replace manual, time-consuming and inconsistent vulnerability scans with a fast, automated process  
  • Gain real-time visibility into runtime vulnerabilities, misconfigurations, and compliance drift across a rapidly expanding portfolio of web applications and open APIs  
  • Prioritize and accelerate the remediation of critical vulnerabilities and zero-day threats across both proprietary and open-source software  
  • Support fast, agile development by integrating vulnerability management capabilities into CI/CD pipelines  
  • Build an automated process for deploying and validating patches across the business  

Qualys Solution

Samsung Life Insurance saw Qualys as the optimal fit for its long-term cybersecurity strategy. Mr. Sangwan Lee, General Manager at Samsung Life Insurance, explains: “We selected the Qualys Enterprise TruRisk Platform because it offers far deeper insights than CVE-based tools. Using Qualys TruRisk scores, we gain a much more accurate view of critical vulnerabilities based on known exploits, asset criticality, compensating controls, and many other factors. Qualys Cloud Agents are also very lightweight, which minimizes the impact on our production systems.”

To establish a single view of its risk exposure across cloud platforms and web applications, Samsung Life Insurance uses Qualys CyberSecurity Asset Management (CSAM) and Qualys TotalAppSec.  

Qualys logo

“Cyber Security Asset Management has helped us identify all the IT assets connected to our network,” says Mr. Sangwan Lee. “We're now reviewing those assets and evaluating unused and end-of-life systems, which will help shrink the attack surface significantly. Later this year, we'll integrate Cyber Security Asset Management with our ServiceNow platform, enabling end-to-end asset governance across our IT estate.”  

Mr. Sangwan Lee adds: “With TotalAppSec, we can detect runtime vulnerabilities, misconfigurations, and compliance drift across our web applications and APIs in real time. As we continue our digital transformation, TotalAppSec will play a key role in securing a fast-growing number of open APIs.”  

When we first started with Qualys, the results were eye-opening; we found vulnerabilities and endpoints that we didn't know were out there. Armed with these insights, we can patch and harden our systems to help keep sensitive data safe—and our approach has already become a template for other businesses within Samsung Group.”

General Manager, Samsung Life Insurance

Qualys Difference

  • Identifies previously undetectable critical vulnerabilities in real time  
  • Delivers clear and complete visibility of cyber threats across all on-premises and cloud systems, including real-time dashboards for decision-makers  
  • Enables fast and effective prioritization of remediation work based on Qualys TruRisk scores  
  • Cuts Average Window of Exposure (AWE) and helps mitigate the risk of zero-day threats  
  • Equips development teams with actionable vulnerability insights across open-source software libraries, including LiteLLM and React  
  • Facilitates SecOps innovation by integrating real-time threat intelligence and vulnerability data from Qualys with the company's cloud-based threat-hunting platform  
  • Lays the foundations for automated RemOps in the future with Qualys TruRisk Eliminate  

Start your 30-day free trial

Try Now

Speak to an Expert

Speak to an Expert