Skip to content

Vendor Consolidation Should Be Part of Your OSS Strategy

One of the great benefits of using open source software is the flexibility that it offers to developers and organizations to use various open source technologies, complementary components, many options to integrate with other software, and above all, independence from vendors. It offers freedom from being locked into a specific proprietary vendor’s technology, support, and contract. 

That said, the typical enterprise organization is using many pieces of open source software within their stack, each with varying support needs. For some organizations, that means managing different support vendors for each piece of open source software and, ultimately, managing the costs and challenges of working with those vendors.

In this blog, we look at the modern realities of using open source in the enterprise, why open source vendor consolidation is important, and how shifting to a vendor-neutral technical support strategy can reduce the complexity of infrastructure maintenance.  

Table of Contents

  1. Strategic Open Source Adoption
  2. Open Source as a Business 
  3. The Problem of Vendor Sprawl
  4. The Benefits of Open Source Vendor Consolidation 
  5. Making the Shift to a Vendor-Neutral OSS Support Provider
  6. Final Thoughts

Back to top

Strategic Open Source Adoption

At its core, OSS refers to software whose source code is openly available for modification, enhancement, and redistribution.

This transparency enables rapid innovation, security validation, and collaborative development. Many OSS projects operate under copyleft licenses, which require modifications to be distributed under the same terms — an important consideration for companies navigating commercial vs. community open source models.  

Major corporations such as Google, Microsoft, Apple, Meta, and IBM are using OSS, as well as as contributing to certain key projects. These investments often align with initiatives like ecosystem expansion, developer engagement, and shared infrastructure strategies.  

Back to top

Open Source as a Business 

Cloudera, Confluent, Databricks, and MongoDB are prime examples of companies that have successfully commercialized OSS using two distinct business models: Software as a Service (SaaS) and Open Core Software. Both of these approaches can be combined or augmented with professional services and technical support. 

Software as a Service

The software-as-a-service (SaaS) business model involves open source software that is hosted, maintained, and easily available for consumption. Users of open source software under this model do not have to worry about installations, deployments, and infrastructure issues.

Open Core Software

The second category refers to what is called open core software, where vendors add proprietary features or tools to open source software (often geared toward enterprise use cases) and sell it via subscription, often with premium support included.

Why do organizations opt to pay for commercial versions of open source technologies they could deploy for free? We asked about this in the most recent State of Open Source Report, and the top response was “professional support and maintenance” (44%) followed by “additional features” (25%). 

With both of these models, there are two common pitfalls that organizations should be aware of: juggling too many vendors (and support contracts) and vendor lock-in. Avoiding vendor-lock in was the second most cited reason for choosing OSS in the State of Open Source Report, so organizations seem to already be aware of that risk. Vendor sprawl, though, can present just as many challenges. 

Back to top

The Problem of Vendor Sprawl

As we have seen with all types of technology over the years, there are periods of expansion and there are periods of consolidation. Open source software is well into an expansion phase and every day there are more open source projects — just look at the CNCF cloud-native and the AI & Data Foundation landscapes for a small sample. 

A byproduct of this is that organizations are using more open source software and, consequently, contracting with more commercial open source vendors. The most recent State of Open Source Report found that about a third (32%) of large enterprises (>5K employees) work with more than 10 vendors to support their open source, and a little over a quarter (27%) work with 20+ vendors. That’s a lot of different vendors to manage and can lead to finger-pointing when something goes wrong, delaying resolution. 

Back to top

The Benefits of Open Source Vendor Consolidation 

As part of moving toward a more mature open source strategy, CIOs, CISOs, and IT executives would be wise to pursue vendor consolidation initiatives — something that benefited the largest software companies 10 or 20 years ago (e.g., consolidation into all Microsoft, or Oracle, or IBM software products).  

The benefits of vendor consolidation include:

  • Reduced Costs: Fewer vendors, streamlined processes, and optimized resource allocation can lead to significant cost savings.
  • Improved Efficiency: Consolidation simplifies workflows, reduces complexity, and allows teams to focus on core tasks rather than managing disparate tools and processes.
  • Enhanced Security: A more centralized approach to security management can improve vulnerability detection, response, and overall security posture.
  • Better Collaboration: Consolidation can break down silos between teams and departments, facilitating better communication and collaboration.
  • Simplified Operations: A unified platform or streamlined processes can make it easier to manage and maintain open source software. 

Now the question becomes, how can organizations consolidate open source vendors and get the best technical support for the OSS inside their mission-critical applications? (Hint: it’s also how they can avoid vendor lock-in.)

Back to top

Making the Shift to a Vendor-Neutral OSS Support Provider

A key reason to go with commercial versions of open source software is access to technical support — to have someone to contact when something goes wrong or is not working properly. But what if you could get SLA-backed support that was not attached to a commercial vendor?  

That’s where independent, vendor-neutral technical support for open source software comes in, as a viable alternative to commercial support that is tied to proprietary platforms. As an example, today’s container and container orchestration technologies (mainly Kubernetes) are being deployed in production environments all over the world with or without commercial support. 

An increasing number of organizations are discovering that it’s possible to skip commercial and open core solutions from companies like Cloudera and Confluent altogether and use only versions from the open source community, paired with support from third parties like OpenLogic. 

Vendor-neutral technical support requires technical expertise, not just for troubleshooting issues, but also to provide expert advice on architecture, configuration, and scalability of production environments. Assistance on how to use open source software at scale and how to integrate different technology stacks becomes very important. The bottom line is, if organizations need technical support for their open source, they no longer have to lock-in with multiple vendors and deploy commercial solutions; they can consolidate support for their entire OSS stack with one vendor-neutral provider.

Back to top

Final Thoughts

Vendor consolidation for open source support also brings another great benefit — the ability to investigate issues across multiple open source technologies. A business can troubleshoot across the software stack without the complexity of talking to multiple vendors that will only support their corresponding piece of functionality and point fingers at each other. 

As mentioned in the previous section, another trend we’re seeing related to vendor consolidation is more and more organizations migrating off of commercial and open core solutions and deploying 100% open source alternatives. The money they save by not paying for commercial licenses can then be reallocated to other infrastructure investments. For these companies, getting unbiased guidance while receiving the same level of support they are used to is crucial to not disrupting business operations.   

About Perforce
The best run DevOps teams in the world choose Perforce. Perforce products are purpose-built to develop, build and maintain high-stakes applications. Companies can finally manage complexity, achieve speed without compromise, improve security and compliance, and run their DevOps toolchains with full integrity. With a global footprint spanning more than 80 countries and including over 75% of the Fortune 100, Perforce is trusted by the world’s leading brands to deliver solutions to even the toughest challenges. Accelerate technology delivery, with no shortcuts.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

IT Task Automation: Best Practices and Use Cases for IT Management with Pandora FMS

automatizacion pfms blog
Content:

 

The Future of IT Management Lies in Automation

IT teams must handle a large number of tasks on a daily basis. Many of these tasks, while essential, are repetitive: resetting passwords, rebooting servers, monitoring logs for errors, applying patches… When performed manually, they can overwhelm technical staff and compromise operational efficiency.
IT automation has emerged as the answer to this challenge. It involves using scripts and specialized tools to automatically execute these and other tasks that previously required human intervention.
According to Gartner, by 2026, 30% of companies are expected to automate more than half of their network activities—a figure that reflects growing confidence in this technology as a driver of competitiveness.

Key Concepts in IT Automation

There are different levels of IT automation that can be adapted to the needs and goals of each organization. Processes can be fully automated end-to-end or focus on specific tasks.

IT Task Automation

This is the most basic level of automation. It focuses on simple, repetitive tasks that are part of the IT department’s daily routine.

Process Automation

This covers a broader set of tasks that occur sequentially to complete a process. There are several approaches to process automation, including:

  • IT Process Automation (ITPA): Focuses on automating complex processes within the IT domain.
  • Robotic Process Automation (RPA): Uses software robots or bots capable of emulating human behavior and interacting with applications and interfaces without the need for code-level or API integrations.
  • Business Process Automation (BPA): Goes beyond simple data entry, automating complex processes that are essential for business operations and often involve multiple departments or systems.

Workflow Orchestration

This involves coordinating multiple tasks to create automated workflows. Unlike the automation of isolated tasks, orchestration manages complex end-to-end operations, ensuring that each step is executed in the correct order and that all task dependencies are properly controlled.

Benefits of IT Task Automation

Automation is not just a technology trend but a powerful tool to improve service quality and operational resilience. Here are some of its direct benefits in IT management:

Reduces Human Error

According to the Uptime Institute’s 12th Global Data Center Survey, human error accounts for 80% of data center service outages. Automation systems minimize the risks associated with manual management, as they are not affected by fatigue, mood, or other personal factors. Tasks are executed consistently, avoiding vulnerabilities that could compromise system integrity.

Improves Operational Efficiency

Automation enhances efficiency and productivity by reducing the need for manual intervention in administrative tasks such as assigning access permissions to new employees, monitoring network device performance, or generating reports.
Automating these processes can save significant time and free up IT teams to focus on value-adding projects. Studies show that IT departments leveraging automation spend 20% more time on strategic initiatives.

Optimizes Resources

In environments without automation or system integration, the same data (such as an employee’s name, position, and department) must be entered manually across multiple systems. This increases the risk of duplicates and inconsistencies.
Duplicate data leads to inefficient resource management by consuming unnecessary storage, increasing processing loads, and slowing down support operations. Automation solutions reuse information across connected systems (for example, using Active Directory to centralize records).
In addition, IT monitoring enables real-time supervision of server storage capacity, prioritization of critical data, and balanced workload distribution, maximizing the performance of available resources.

Improves Service Quality

IT task automation allows incidents to be resolved more quickly and with fewer errors. This translates into a better user experience and higher service quality.

Ensures Consistency and Regulatory Compliance

Automation ensures large-scale consistency, something impossible to achieve through manual task execution. It helps establish clear, consistent processes that can easily adapt to new requirements and regulatory changes. For example, in multicloud environments, standardized policies can be applied to control workload assignments, ensuring compliance with security and operational efficiency guidelines.
Moreover, everything that is automated generates a traceable record, simplifying audit processes. There is no longer a need to manually gather documentation and compliance evidence. Automation tools save IT teams significant time, reducing the effort required for audit preparation by up to 50%.
Finally, automation also contributes to achieving Environmental, Social, and Governance (ESG) objectives by optimizing resource consumption, such as energy use, and enabling more efficient infrastructure management.

IT Task Automation: Where to Start?

Not all IT tasks can or should be automated. Some operations still require human intervention, especially those involving critical judgment, creativity, or complex decision-making.
However, many routine, repetitive, and error-prone tasks are ideal candidates for automation. These activities typically follow clearly defined rules or depend on specific events to trigger their execution—such as generating reports, moving files, validating access, and so on.
A common example is password resets. According to Gartner, between 20% and 50% of IT support requests are related to this issue. Automating the password reset process helps reduce the workload and improves the user experience.
Below are some examples of task automation by IT management area:

Infrastructure Management

Automation of tasks related to servers, storage, and data centers.

  • Automatic provisioning of physical or virtual servers.
  • Monitoring storage capacity to detect critical thresholds and trigger predefined actions such as deleting temporary files or automatically scaling resources.
  • Inventorying IT assets and verifying software license usage.
  • Identifying faulty or underperforming hardware before it impacts business operations.
  • Scheduling automatic backups to reduce the risk of data loss.
  • Automatically migrating data or applications to cloud environments.
  • Scheduled shutdown and startup of virtual machines to optimize energy consumption.

Network and Systems Administration

Tasks focused on maintaining the availability and performance of the network environment and operating systems.

  • Implementing standardized configurations across all network devices.
  • Monitoring the performance of applications and servers, generating reports on availability, latency, and response times.
  • Automatically deploying software updates or security patches to address vulnerabilities.
  • Dynamically assigning IP addresses using DHCP and DNS automation.
  • Restarting failed servers to restore service without manual intervention.
  • Periodically generating performance reports (CPU usage, memory, bandwidth, etc.).

Support and Customer Service

Using automation to resolve user incidents and requests more efficiently.

  • Automatically resetting passwords through self-service workflows.
  • Automatically creating support tickets and classifying them by issue type (hardware, software, network) to assign them to the appropriate IT staff.
  • Configuring chatbots or virtual assistants to handle user inquiries 24/7.
  • Creating or deleting user accounts in systems.
  • Automatically assigning access permissions based on roles.

Cybersecurity Management

Automating tasks related to threat detection, response, and prevention.

  • Verifying that firewalls and antivirus software remain active.
  • Automatically sending alerts when network activity exceeds established thresholds.
  • Analyzing logs to detect suspicious behavior.
  • Automatically blocking IP addresses after multiple failed login attempts.
  • Monitoring compliance with regulations and service level agreements (SLAs). For example, automation can detect an unencrypted database and immediately correct the issue.
  • Collecting and storing log data for cybersecurity audits.

Tools, Practical Applications, and Use Cases

Effective automation tools help reduce errors, improve security, and provide fast, efficient support. Each IT management area uses specialized solutions tailored to its needs.

IT Monitoring

IT technicians—and especially managed service providers (MSPs) use RMM (Remote Monitoring and Management) tools to monitor the performance of systems and devices connected to the network.
They enable centralized management of processes from a single dashboard, allowing the creation of automated workflows.
Compared to manual script execution (which is slow and error-prone), RMM tools offer libraries of preconfigured scripts that administrators can use to perform a wide variety of tasks, such as restarting services, deleting temporary files, or uninstalling unauthorized software.
These functions save IT teams significant time, improve operational efficiency, and help maintain competitiveness in management strategies.

Support, Ticket Management, and Customer Service

In technical support, ITSM system stand out—platforms designed to manage the entire lifecycle of IT services following frameworks such as ITIL.
These comprehensive solutions cover a wide range of tasks, from tracking and managing the lifecycle of hardware and software assets to incident management, automatic ticket assignment, and more.
ITSM systems improve response times and service quality by creating consistent processes aligned with business objectives. As a complement, RPA tools (for example, chatbots that handle frequently asked user inquiries) can be used to increase support capacity without requiring additional human resources.

Infrastructure Management

As organizations move away from physical server racks, most IT workloads are now executed through software. While this greatly enhances infrastructure scalability, it also requires more robust development practices.
In this context, Infrastructure as Code (IaC) tools allow teams to automate tasks such as server, network, and multicloud environment configuration through reusable scripts, reducing deployment errors.

Cybersecurity

Automation can also be used to identify, prevent, and respond to threats in IT environments efficiently and quickly.
Among the most advanced solutions in this field are Security Orchestration, Automation, and Response (SOAR) tools, which correlate data and execute predefined actions to mitigate risks—such as blocking suspicious IP addresses.
Endpoint Detection and Response (EDR) tools are also widely used. These monitor endpoint devices such as computers, servers, or mobile devices and detect threats that traditional antivirus solutions may miss.

Integrated Automation Features in Pandora FMS

Pandora FMS is a comprehensive IT monitoring and management solution that includes various automation features to optimize operations and reduce manual workload.
The most important features include:

Automatic Detection and Discovery

Pandora FMS automatically scans networks to discover new devices and create dynamic topology maps.
Its Network Discovery tool identifies newly connected devices and generates visual maps that display the connections between components.

Automated discovery significantly enhances observability, which is essential for quick issue resolution.

Remote Command Execution and Custom Scripts

Pandora RMM allows remote and bulk execution of commands and scripts across multiple deployed agents. For example, inactive services can be restarted immediately, disk cleanups can be performed on hundreds of machines, or specific configurations can be applied network-wide.
It also offers the ability to run custom scripts (in Bash, PowerShell, Python, etc.) directly on monitored systems through its plugin system.

Automated Patch Management

Through its RMM component, Pandora FMS allows IT teams to manage updates and patches across multiple systems, whether regular releases (RRR) or long-term support (LTS) patches for critical fixes. This ensures that devices remain protected against vulnerabilities and compliant with security policies.

Alert System

The alert system is a key feature for proactive IT monitoring, enabling automated responses to system events. When a monitoring module detects a value exceeding a threshold or an abnormal behavior, Pandora FMS triggers an alert.

The alert workflow is configured in three steps:

  • Command: Defines what action will be executed when the alert is triggered (e.g., sending an email or running a script).
  • Action: Customizes the command arguments (e.g., message content or script parameters).
  • Template: Specifies the conditions under which the action will be triggered (e.g., activation threshold and time interval).

Additionally, Pandora FMS includes a filtering system that prioritizes and escalates alerts based on severity, ensuring IT teams receive only relevant information and reducing alert fatigue.

Automated Incident Management

Pandora ITSM includes a powerful yet flexible Helpdesk tool designed to automate support and customer service tasks.

The Helpdesk allows IT teams to create automated workflows for ticket assignment, define escalation rules, and set time intervals (SLAs).
In addition, IT teams can filter results using more than 30 different filters and generate detailed reports on key metrics such as average resolution time and operator performance, contributing to continuous service improvement and customer satisfaction.

Integrations for Automation

Integration is crucial in today’s IT ecosystems. Instead of running multiple isolated automation tools and processes in silos, IT teams can use a single platform to orchestrate workflows.
A key component is the use of REST API adapters, which allow seamless connection to third-party services and integration with virtually any technology—without the need for custom scripts. This is essential in hybrid and multicloud IT environments where interoperability issues often arise among different providers. According to a Mulesoft survey, organizations that use APIs to connect endpoints are 69% less likely to report integration issues.
Pandora FMS is part of this solution, offering smooth integrations via its API with leading cloud service providers (AWS, Azure, Google Cloud), legacy systems, and even collaborative tools like Slack or Telegram.

Automation Metrics and KPI Evaluation

Automation is not about simply putting processes on autopilot. For an IT automation strategy to be truly effective, regular evaluations are needed to assess its impact and identify what is working and what isn’t.
The proper way to do this is by using key performance indicators (KPIs).
The most important KPIs include:

  • Error Reduction: Measure the number of support requests before and after implementing automation. A decrease in tickets is a clear sign of success.
  • Cost Reduction: Calculated by quantifying savings in labor and other operational resources.
  • Productivity: Pay close attention to incident resolution times. These should drop significantly after automation is implemented.
  • Regulatory Compliance Monitoring: Automating IT tasks such as patch management or sensitive data encryption reduces the risk of legal non-compliance, meaning fewer fines and penalties.

Pandora FMS facilitates KPI tracking by generating customized (dashboards) and detailed reports that display system behavior and support data-driven decision-making.

Implementation and Best Practices in IT Management

Automation begins with a detailed analysis of the organization’s current state. This involves assessing costs, benefits, and the impact of the upcoming changes.

Defining Objectives

Once the assessment is complete, it’s time to set the direction. The first step is to define clear, concrete objectives. What problems is automation expected to solve? It may involve reducing incident response times, minimizing human errors, or strengthening infrastructure security. According to a McKinsey survey companies that successfully achieve their automation goals share certain common factors, such as making automation a strategic priority in business process planning—while keeping people involved in the transformation.

Selecting the Right Tools

Choosing the right tools is critical. It’s not just about functionality but also scalability, ease of use, and compatibility with existing systems (often achieved through API-based integrations).
Just as important as connectivity is security: any automation platform must include features such as data encryption, SSL/TLS connections, secure file transfers (FTPS/SFTP), role-based authentication, and audit logs to ensure traceability.

Phased Implementation

Once the solution is selected, it’s time to establish a responsible team and an implementation timeline. If multiple processes are to be automated, a phased approach is recommended, starting with the less complex ones.

Configuration and Testing

When the plan is ready, IT teams configure the tool and define the workflows. Most IT automation tools are event-driven, meaning processes are triggered when specific conditions occur, such as a service failure or a new support ticket submission.
After configuration, thorough testing is conducted to ensure everything operates correctly.

Ongoing Reviews

There’s no automation without continuous monitoring. Once the solution is implemented, its performance must be monitored (using the KPIs mentioned earlier). This helps identify new improvement opportunities, ensuring that automation remains effective and continues to adapt to the evolving needs of the business.

Conclusion

Automation is not just a trend—it’s a key element for staying at the forefront of digital transformation.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About PandoraFMS
Pandora FMS is a flexible monitoring system, capable of monitoring devices, infrastructures, applications, services and business processes.
Of course, one of the things that Pandora FMS can control is the hard disks of your computers.

Nord Security

Why German CISOs need to rethink their cloud decisions

Digital sovereignty as a strategic imperative

In recent years, digital sovereignty has shifted from a niche concern to a core strategic priority — especially in Germany, where trust, data protection, and independence have long been valued. The latest  — based on a Q2 2025 survey of more than 800 IT and cybersecurity leaders across Germany, France, Belgium, and the Netherlands — underscores this shift. Seventy-eight percent of European executives surveyed say their company’s leadership is more concerned about digital sovereignty today than a year ago. That awareness is particularly strong in Germany (81 percent) and France (83 percent). At the same time, 70 percent believe European companies are too dependent on foreign technologies and should reduce this reliance — prompting seven in ten organizations to consider switching to European cybersecurity providers.

This shows a growing awareness of the legal and geopolitical dimensions of digital infrastructure — and rising expectations for providers and operators.

What happens in a crisis or conflict?

It’s no longer enough to focus only on technical performance or the feature sets of cloud providers. Decision-makers are increasingly asking: Where is our data physically located? What laws apply? Who could theoretically or practically access it — and what happens in a crisis or conflict?

For many companies, these are no longer abstract questions. They’re central to risk management and long-term digital strategy.

These questions resonate strongly in Germany, where the  runs deep. Strict data protection laws were in place well before the . This makes Germany well-positioned to lead the current debate on digital sovereignty in Europe. Regulations like the GDPR and the  Directive provide a clear and binding framework — pushing decision-making toward greater responsibility, transparency, and long-term resilience.

The impact of extraterritorial laws

Another critical issue is the impact of extraterritorial laws like the U.S. CLOUD Act. This law allows U.S. authorities to access data from U.S.-based companies — even if that data is stored on servers outside the U.S., including in Germany. For many companies, that’s a contradiction: How can you control your own security architecture if foreign governments can  your sensitive data?

This reality shows that technical security isn’t enough — what’s needed is control over the contractual, technical, and legal frameworks.

In this context, it’s no surprise that many organizations are revisiting on-premises models or hybrid architectures. But the desire for control mustn’t stall innovation. There are alternatives to full in-house management. At Keepit, we’ve  purpose-built for the needs of European companies. We run our own independent infrastructure across several global regions — including the EU, in Germany and Denmark — and enforce strict separation between zones. Data stored in Germany stays in Germany. Access from other regions — even within our own systems — is technically impossible.

Our independence from hyperscalers like AWS, Microsoft Azure, and Google Cloud is also key. This strategic choice protects our users from global dependencies and indirect access paths. By owning and operating , we guarantee not only where data is stored but also who controls access — with full transparency. Our users know where their data is, what jurisdiction it falls under — and who isn’t allowed to see it.

No need to compromise

For Keepit,  isn’t a theoretical ideal. It’s a cornerstone of modern cybersecurity. The latest HarfangLab report makes it clear: Companies in Germany and across Europe are no longer willing to compromise when it comes to control over their data. The path to a sovereign and secure digital future may not be simple — but with the right partners and carefully chosen infrastructure, that future can be shaped.

At Keepit, we’re here to support that journey — with transparent, compliant, and self-operated solutions. Because digital sovereignty isn’t just about data protection — it’s the foundation of resilience and the ability to act in an increasingly complex digital world.

 

About Keepit
At Keepit, we believe in a digital future where all software is delivered as a service. Keepit’s mission is to protect data in the cloud Keepit is a software company specializing in Cloud-to-Cloud data backup and recovery. Deriving from +20 year experience in building best-in-class data protection and hosting services, Keepit is pioneering the way to secure and protect cloud data at scale.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

The Truth About PAM: Debunking 3 Common Myths Holding SMEs Back

Ever feel like cybersecurity is a world of complex tools and jargon, mostly meant for huge companies? Especially when it comes to something like privileged access management (PAM)? 

You’re not alone. 

Many small-to medium-sized businesses (SMEs) think PAM is just for the big guys with sprawling IT departments and infinite budgets.

But what if we told you that this perception is not only false, but actively holding your business back from essential security?

Our latest guide PAM for the People sets the record straight and debunks three common myths listed below, preventing SMEs from embracing the security they truly deserve.

Myth #1: PAM Is Only for Large Enterprises (with Dedicated Security Teams)

This is probably the biggest misconception out there: if you don’t have a dedicated Security Operations Center (SOC) team, PAM isn’t for you. But here’s the plain truth: cybercriminals don’t discriminate by company size.

In fact, they often target smaller businesses because they assume your defenses aren’t as strong. According to our latest survey, a shocking 46% of SMEs were hit by a cyberattack in 2024. And their concerns are varied:

And it’s not just the direct attacks. Supply chain attacks like SolarWinds and MOVEit have shown that breaches can affect any organization, no matter its size, even if it wasn’t the initial target.

Plus, IT admins are not the only ones who have privileged access today either — many employees have some level of access to their company’s critical resources. Believing PAM is only for the giants leaves your business wide open to very real threats.

Myth #2: PAM Is Too Complex and Expensive for SMEs

Okay, this one used to be true. Back in the day, PAM solutions often came with hefty price tags, complex setups, and a steep learning curve that only tech experts could handle. Many legacy systems demanded on-premise infrastructure, which is a non-starter for cloud-first SMEs.

But modern PAM solutions are built to be accessible, scalable, and user-friendly. Many are cloud-based, meaning you don’t need to buy or maintain expensive hardware. 

And when you think about it, the cost of not having PAM — the financial fallout from a data breach, regulatory fines, reputational damage, and business disruption — is way, way higher than investing in the right protection. 

Don’t let old ideas about cost and complexity stop you from securing your business.

Myth #3: PAM Doesn’t Work with Modern Tech Setup

Some people still think PAM is a relic of the past that can’t keep up with today’s dynamic, cloud-centric workplaces.

This couldn’t be further from the truth.

While legacy PAM was indeed built for an on-premise world, modern PAM has adapted to the realities of hybrid and remote work.

Modern PAM seamlessly integrates with Software-as-a-Service (SaaS) apps, cloud infrastructure, and even in-browser activity. It helps secure access without needing clunky, often less secure VPNs, aligning with Zero Trust principles that focus on identity-level security.

For PAM to be truly effective, it must be comprehensive, extending its protective reach across every access transaction — from identity and device to SaaS apps and cloud resources. Any solution that leaves blind spots in your environment is simply not doing its job.

Take Control of Your Security with JumpCloud

The bottom line is: PAM isn’t just for the big corporations anymore. It’s a must-have for every business. The market is finally offering solutions that are easy to get, affordable, and perfect for businesses like yours.

JumpCloud is leading the way, making robust PAM available to organizations of all sizes. It gives you a clear, simple path to protecting all your vital assets, making compliance easier, and confidently tackling today’s toughest security challenges.

Ready to cut through the confusion and get the right security for your business? Download our free eBook PAM for the People to discover how you can bring top-notch security to your company and truly protect your business in today’s digital world.

About JumpCloud
At JumpCloud, our mission is to build a world-class cloud directory. Not just the evolution of Active Directory to the cloud, but a reinvention of how modern IT teams get work done. The JumpCloud Directory Platform is a directory for your users, their IT resources, your fleet of devices, and the secure connections between them with full control, security, and visibility.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

OTRS Features Compared to the ((OTRS)) Community Edition

OTRS continuously delivers new features and enhancements for its users. These go far beyond the basic functions of a ticketing system, creating significant value. Customer-specific requirements and modern focus areas like AI services and automation are key to simplifying work and increasing efficiency.

The ((OTRS)) Community Edition does provide some essential functionality, but it lacks many of the core capabilities expected in a modern service management system. This gap becomes even more apparent in today’s fast-paced tech landscape, where real leaps in productivity and performance matter more than fleeting trends.

This article provides a concise overview of how modern OTRS features make the switch from the ((OTRS)) Community Edition worthwhile.

Key Advantages of the New OTRS Features

Since the ((OTRS)) Community Edition is based on older versions of OTRS and has not been supported by OTRS AG since 2020, it serves as a basic foundation but lacks modern features and critical developments. Only the new managed OTRS provides professional-grade security with regular updates and patches.

Here are the key OTRS functionalities that the ((OTRS)) Community Edition lacks – and the major benefits that come with them:

#1 Workflows and Automation

Process management, web services, and the Generic Agent enable automated workflows and seamless data exchange within OTRS or between OTRS and other systems. This reduces manual effort and increases efficiency.

In the Process Manager, users can simply position activities on the screen and connect them with sequence flows. These flows may require user input or automatically execute tasks such as pushing/pulling data, setting attributes, sending emails, creating articles, or linking tickets.

Thanks to web service support, OTRS can even send data directly to ERP or CRM systems.

#2 Kanban View and Resource Planning

The Kanban view offers clarity, flexibility, and greater efficiency. It can be organized by status, priority, and more. Users can drag and drop tickets between collapsible columns with ease.

The improved OTRS calendar keeps you informed and provides a clear view of all appointments—whether meetings, workshops, or absences. Multiple views allow you to tailor the display to your specific needs.

For example, the resource calendar gives a complete overview of your team’s availability and lets you assign appointments like field service visits to agents via drag and drop.

#3 Translation Management 

Our interface supports over 40 languages. Each agent can choose their preferred language in their personalization settings. In the ((OTRS)) Community Edition, custom translations had to be done via command line and required access to the file system.

In contrast, OTRS allows you to add translations directly through the admin interface—no special knowledge or access rights needed. Agents can add translations themselves if required.

#4 Updated User Interface

With customizable widgets, the dashboard offers a comprehensive overview of business objects and statistics. Tickets can be created quickly and dynamically using dropdown menus and input fields.

Depending on the selected input, additional fields appear to collect more information. The external interface functions as a self-service portal for customers and employees, featuring knowledge base articles, updates, and more. The service catalog lets users create process tickets for their requests.

Agents can use the sidebar organizer to create and label lists of tickets, customers, and other business objects. These lists are accessible from any screen.

#5 CMDB Integration with Other Tools

The Configuration Management Database (CMDB) supports asset management by showing relationships between configuration items (CIs), incidents, and changes. It tracks CIs and their status, linking them to relevant tickets and change processes. This gives teams full visibility into their IT environment.

A recent OTRS enhancement allows the CMDB to connect easily with tools like EV Reach. This provides an instant central view of IT assets and comprehensive monitoring—a major step toward robust, full-scale IT security.

#6 REST API

The REST (Representational State Transfer) API makes it easier to integrate OTRS with other systems. By enabling communication between OTRS and external applications, workflows can be automated. Improved interoperability leads to smoother operations and more efficient data exchange.

#7 Enhanced Reporting and Statistics

The latest OTRS version includes robust tools for generating reports and statistics on Service Level Agreements (SLAs) and ticket volumes. A statistics module lets users create various reports – e.g., total tickets by type, priority, status, queue, or service.

Reports can be scheduled and automatically generated in formats such as PDF, providing valuable insights into performance metrics. This supports better decision-making.

These features give companies the data-driven insights they need to monitor performance, ensure SLA compliance, and identify areas for improvement—ultimately boosting customer satisfaction.

New AI Services

In addition to the above features, OTRS users can access a range of AI services. Using AI credits, you gain access to cutting-edge tools that enhance service quality, increase productivity, and save valuable time in daily operations.

Available AI features include:

  • Ticket classification and service descriptions
  • AI-powered response generation
  • Sentiment analysis
  • Real-time translations
  • Unified knowledge access

How to Start Your OTRS Project

With OTRS, you benefit from regular updates, exciting new features, and top-tier customer support. We offer a personalized solution tailored to your requirements.

There are three flexible ways to get started with OTRS:

1. Project Transition (SaaS)

Enjoy the full benefits of our SaaS offering. We update your system to the latest version hosted in our OTRS Private Cloud.

Automatic updates, patches, and backups keep your system current. Location doesn’t matter—you can access OTRS from anywhere.

2. Project Migration (On-Premise)

With OTRS On-Premise, you retain full control. We update your system to the latest version while all data remains on your servers. You maintain full autonomy and can access OTRS from any device.

3. New System or Preconfigured Solution

We’ll build a system for you—either from scratch or as a preconfigured solution. A brand-new OTRS system is tailored to your exact requirements, and you can choose between SaaS or on-premise.

Our turnkey solutions come preloaded with helpful features, making them fast to implement and highly reliable from day one.

Conclusion: Why Switching to OTRS Makes Sense

Users of the ((OTRS)) Community Edition are several years behind the times. While it may be sufficient for basic tasks, it falls short in terms of productivity, time savings, and service quality.

In today’s rapidly evolving landscape, every new development brings progress. OTRS is no different. Its new, improved, and technically advanced features offer capabilities that ((OTRS)) Community Edition users can only dream of.

But why dream when you can make it a reality? Switching to OTRS is a smart move. Beyond just security, design, and scalability, the modern features provide plenty of reasons to make the leap. The biggest one: work gets easier and more effective.

In short, OTRS is a powerful driver of business value creation.

About OTRS

OTRS (originally Open-Source Ticket Request System) is a service management suite. The suite contains an agent portal, admin dashboard and customer portal. In the agent portal, teams process tickets and requests from customers (internal or external). There are various ways in which this information, as well as customer and related data can be viewed. As the name implies, the admin dashboard allows system administrators to manage the system: Options are many, but include roles and groups, process automation, channel integration, and CMDB/database options. The third component, the customer portal, is much like a customizable webpage where information can be shared with customers and requests can be tracked on the customer side.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

What are managed and unmanaged devices? How to protect them?

Understanding the key distinctions between these two device types is crucial for modern IT security and strategy.

In today’s dynamic work environments, IT teams face a significant challenge: securing company-owned devices while also protecting the growing number of personal devices employees use to access corporate resources. This requires a clear understanding of the difference between managed and unmanaged devices.

Defining the Two Types

Managed Devices: These are corporate-owned endpoints that are enrolled in a centralized device management solution. They give IT departments full control over security, software updates, configurations, and data. This level of control is essential for maintaining strict security and compliance standards.

Unmanaged Devices: Often referred to as BYOD (Bring Your Own Device), these are personal devices that employees use for work. While they offer convenience and cost savings, they present a significant security risk because IT has limited control over their security posture and data. To mitigate this, companies often use tools like containerization to separate work data from personal data.

Key Differences at a Glance

FeatureManaged DevicesUnmanaged Devices
OwnershipCorporate-ownedEmployee-owned (BYOD)
IT ControlFull control over the entire deviceLimited control, often confined to specific apps or data
Security EnforcementMandatory policies, automated updates, and full data encryptionPolicy enforcement often relies on containerization and conditional access
Primary Use CaseHigh-security roles, sensitive data handlingGeneral-purpose work, flexible access
VisibilityComprehensive visibility into device activity and security statusLimited visibility, focused on work data access
Risk ProfileLower risk, easier to secureHigher risk, requires careful management

Securing Managed Devices

For company-owned devices, a robust Unified Endpoint Management (UEM) solution provides the necessary tools for comprehensive security. Key methods include:

  • OS and app patching to fix vulnerabilities
  • Enforcing strong passwords and data encryption
  • Configuring Kiosk Mode for single-purpose devices
  • Automating app installation and updates
  • Remotely monitoring device health and security status
  • Setting up automated compliance checks
  • Implementing geo-fencing and device location tracking
  • Creating role-based access controls

Securing Unmanaged Devices

Securing personal devices requires a different approach that respects employee privacy while protecting corporate data. Effective strategies include:

  • Containerization: This creates a secure, encrypted “container” on the device to store and manage corporate data separately from personal data.
  • Conditional Access: Ensures that only compliant devices and users can access corporate resources.
  • Zero-Trust Access: Assumes no user or device is trustworthy by default, requiring continuous verification before granting access.
  • Application Management: Allows IT to enforce security policies on corporate apps without controlling the entire device.

Ultimately, the best strategy is a combined one. Most organizations will benefit from using both managed devices for their most critical operations and unmanaged devices for their flexibility. The key is to implement a comprehensive management solution that can effectively secure both, ensuring that your organization’s data remains protected regardless of the device it’s accessed from.

About Scalefusion
Scalefusion’s company DNA is built on the foundation of providing world-class customer service and making endpoint management simple and effortless for businesses globally. We prioritize the needs and feedback of our customers, making sure that they are at the forefront of all decision-making processes. We are dedicated to providing comprehensive customer support services, and place emphasis on customer-centric thinking throughout the organization.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

The MSP’s Guide to MFA for Small Business: Slash Costs & Complexity with an All-in-One Solution

For Managed Service Providers (MSPs) whose growth is fueled by serving Small and Medium Businesses (SMBs), the security landscape is a minefield of complexity and escalating costs. Your clients demand enterprise-grade protection, but the traditional security model—bolting a separate, expensive Multi-Factor Authentication (MFA) solution onto a remote access platform—is often unsustainable for the SMB budget. This forces you, the MSP, into a difficult position, leading to “subscription fatigue” for your clients and a Total Cost of Ownership (TCO) that can cause lost opportunities or shrinking margins.

What if you could deliver robust, compliant, and user-friendly MFA without forcing your SMB clients to pay for a standalone Identity Provider (IdP)?

This is the paradigm shift offered by integrated security platforms. This guide breaks down how MSPs can leverage an all-in-one solution like Thinfinity Workspace, with its powerful native MFA capabilities, to drastically reduce costs, simplify management, and deliver a superior, more profitable security service to the SMB market.

The High Cost of “Separate” Security: Why the Traditional Model Fails for the SMB Niche

The conventional method for implementing MFA is effective, but expensive. It involves a costly and complex stack:

  1. A Remote Access Solution (for VDI, VPN, etc.)
  2. A Third-Party Identity Provider (like Okta, Duo, or Azure AD P1/P2)

While this model can be a good fit for large enterprises with dedicated budgets, it creates significant financial and operational burdens for MSPs serving SMBs:

  • Punishing Licensing Fees: Most IdPs charge a recurring per-user, per-month fee, often ranging from $3 to $6 per user. For an SMB with 100 employees, that’s an extra $3,600 to $7,200 a year—a cost that can make your proposal uncompetitive.
  • Margin Compression & Lost Deals: As an MSP, you either have to absorb these third-party costs, which erodes your margins, or pass them on, risking the loss of the deal to a less secure but cheaper alternative.
  • Vendor and Complexity Overload: Managing multiple vendors, support contracts, and admin consoles for each client creates inefficiency and makes it harder for your team to scale services profitably.

For many SMBs, these costs put enterprise-grade MFA out of reach. For their MSPs, it’s a constant barrier to growth.

Infographic comparing Traditional MFA stack (higher cost, complex, third-party IdPs) with Thinfinity All-in-one MFA (zero extra fees, simple setup, native MFA).

Thinfinity’s Game-Changing Approach: Powerful Native MFA is Built-In

Thinfinity Workspace disrupts the old model by integrating a powerful MFA engine directly into the platform. This isn’t a stripped-down add-on; it’s a comprehensive, standards-based solution that eliminates the need for an external IdP, making it an ideal fit for the cost-conscious SMB market.

At its core is a native HOTP/TOTP server. This allows you to enforce strong MFA using free, widely available authenticator apps that your clients already know and trust, including:

  • Google Authenticator
  • Microsoft Authenticator
  • Duo Mobile
  • Okta Verify

The user experience is seamless. On first login, the user scans a simple QR code to enroll their device. For subsequent logins, they just enter the code from their app. There are no extra subscriptions to buy and no proprietary hardware to manage.

Beyond Native: Full Flexibility for Every Client, Large or Small

While the native MFA is a perfect cost-effective solution for the SMB niche, Thinfinity is built to scale. For clients who have already invested in an external IdP (common in larger companies), Thinfinity offers deep integration capabilities. This flexibility is key for MSPs managing a diverse portfolio. Thinfinity seamlessly integrates with:

  • Duo Security: For push notifications, phone calls, and SMS passcodes.
  • SAML 2.0 Providers: Compatible with IdPs like WatchGuard’s AuthPoint, Azure AD, and Okta for single sign-on (SSO) workflows.
  • Biometric Providers: Integrates with platforms like BIO-key and Trust Stamp for advanced, privacy-preserving authentication using fingerprints, facial scans, and more.

This hybrid approach gives MSPs the best of both worlds: a cost-free, high-margin native option for their SMB clients, and enterprise-grade integration for larger customers, ensuring you never have to turn away an opportunity.

Diagram showing six MFA authenticators: Google, Okta, SAML 2.0, Microsoft, DUO, and Biometric Providers.

The MSP Advantage: A New, High-Margin Security Service

For an MSP focused on the SMB market, Thinfinity’s all-in-one platform is a business model accelerator.

  1. Massively Reduced TCO for Clients: You can now offer a secure remote access solution with MFA for a single, predictable price. This is a powerful selling point against competitors who are forced to pass on separate IdP licensing costs.
  2. Simplified Deployment and Management: With a single console for remote access and MFA policies, you reduce administrative overhead and slash the time it takes to onboard a new client.
  3. A High-Margin, Scalable Offering: Package and sell “Enterprise-Grade Security for SMBs” without the enterprise-level cost structure. Because the MFA is built-in, your margins are protected, allowing you to build a profitable and scalable managed security service.

Why SMBs Choose an All-in-One Solution

For a small or medium business, the value proposition is crystal clear:

  • Stop Paying the “MFA Tax”: Eliminate the recurring per-user fees from external IdPs and reallocate that budget to core business activities.
  • Get Enterprise Security on an SMB Budget: Access advanced features like granular policy controls, conditional access, and even biometrics without the prohibitive cost.
  • Compliance Without Complexity: Easily enforce the strong authentication required by regulations like HIPAA, GDPR, and PCI-DSS, reducing the risk of costly fines.
  • Future-Proof Your Security: Operate securely in any environment, including air-gapped networks where cloud-based IdPs are not an option.

Integrated MFA Benefits for MSPs and SMBs

BenefitImpact for MSPs & SMBs
SecurityStrong protection against breaches and credential theft
ComplianceEasier regulatory alignment and documentation
Centralized ManagementEfficient, unified control over multiple clients and users
Cost SavingsLower breach risk, predictable pricing, minimal hardware investment
ScalabilityEasy to grow with client needs; supports remote/cloud work
User ExperienceSSO, self-service, and reduced password fatigue
Customer TrustDemonstrates commitment to security, enhancing reputation
IT Burden ReductionFrees internal teams, offers 24/7 support and monitoring

Cost-Saving Benefits of Thinfinity’s Native MFA

Cost AreaHow Thinfinity Native MFA Saves Money
LicensingNo need for external MFA/IdP subscriptions
DeploymentFree authenticator apps; no hardware tokens required
IT ManagementSingle platform reduces complexity and support needs
InfrastructureNo extra servers or cloud services for authentication
ScalabilityPredictable costs as business grows
ComplianceBuilt-in features support regulatory requirements

Cost Comparison

Cost CategoryAll-in-One MFA SolutionThird-Party Integration
Licensing/SubscriptionIncluded in platform fee$3–$6/user/month, often tiered
Infrastructure/HardwareUses existing, free appsMay require servers/tokens/devices
IntegrationPre-integrated, minimal setupCustom engineering, ongoing effort
Maintenance/SupportCentralized, fewer ticketsMulti-vendor, higher support load
User ExperienceUnified, less training neededFragmented, more user confusion
Hidden CostsPredictable, flat-rateAdd-ons, advanced features extra
Compliance/AuditBuilt-in toolsMay require extra software

Conclusion: The Future of Security for SMB is Integrated

The era of fragmented, expensive security stacks is over, especially for the SMB market. For both MSPs and the clients they protect, the path to stronger security and higher margins lies with integrated platforms.

Thinfinity Workspace provides a complete, cost-effective MFA solution that removes the financial and technical barriers to enterprise-grade security. By offering a robust native MFA engine alongside flexible integration options, it empowers MSPs to profitably secure their SMB clients while still having the power to serve larger enterprises.

About Cybele Software Inc.
We help organizations extend the life and value of their software. Whether they are looking to improve and empower remote work or turn their business-critical legacy apps into modern SaaS, our software enables customers to focus on what’s most important: expanding and evolving their business.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Anatomy of a Breach: How One Immutable Backup Stopped a 5-Minute Attack

Modern Cyberattacks and the Power of Immutabil

Modern cyberattacks are measured in minutes, not days. The line between a contained incident and a catastrophe is often drawn before the security team even receives the first alert. In a recent Black Hat webinar, we deconstructed a real-world breach where sophisticated attackers, later attributed to the threat actor Silk Typhoon, compromised a network in minutes. Their attack was swift, silent, and effective—until they hit one unbreakable defense: immutability.

The Timeline of Compromise

Minute 0-1: The Initial Breach It began with a single, deceptive link clicked by a support admin. The phishing page quietly stole a valid session token, allowing the attackers to bypass multi-factor authentication and conditional access policies as if they were the legitimate user. The perimeter was gone in under 60 seconds. Minute 2: Privilege Escalation With the stolen token, the attackers exploited a zero-day vulnerability to deploy a web shell inside a Kubernetes pod within an Azure cluster. A single command dumped Microsoft 365 service principal secrets, instantly granting them delegated administrative rights across dozens of tenants. No alarms were triggered.

The Attacker’s Playbook: Destroy the Safety Net

With high-level credentials secured, the attackers initiated a classic anti-forensics strategy designed to make recovery impossible. They knew that as long as backups exist, the victim has a path back. Their objectives were simple and brutal:
  • Purge Audit Logs: Erase any trace of their activity.
  • Delete Backups: Send bulk deletion commands to wipe out all restore points.
By removing the evidence and the safety net, they aimed to leave the organization with no choice but to negotiate.

The Turning Point: The Immutable Wall

At approximately minute five, the attack unraveled. When the attackers’ high-privilege delete commands hit the backup storage repository, the system responded not with compliance, but with a hard stop: Error 403, Object Locked. The backup storage layer was configured with WORM (Write Once, Read Many) immutability, applied at the moment of data ingest. This meant that once a backup was written, it could not be altered or deleted by anyone—regardless of their administrative permissions—until its predefined retention period expired. The attackers’ stolen credentials were useless. They were bouncing off a digital wall that refused to honor their commands.

The Aftermath: The Gift of Time

The attackers’ failure to destroy the backups was the critical break in the kill chain. While the initial breach moved at machine speed, immutability stretched the incident response window from minutes into days. In cybersecurity, that is a lifetime. This gift of time allowed the defenders to:
  • Investigate the breach without pressure.
  • Rotate all compromised secrets.
  • Confidently contain the scope of the incident.
  • Restore clean data and resume business operations.
Instead of negotiating with attackers on a leak site, the team was executing a controlled recovery.

Key Takeaways for Security Leaders

This case study offers a clear lesson: your backups are a primary target. A determined attacker will not stop at your perimeter; they will go after your last line of defense first. When backups are truly immutable, even the most powerful stolen credentials cannot lead to their destruction. In this real-world scenario, the difference between containment and catastrophe was immutability, full stop.

About Keepit
At Keepit, we believe in a digital future where all software is delivered as a service. Keepit’s mission is to protect data in the cloud Keepit is a software company specializing in Cloud-to-Cloud data backup and recovery. Deriving from +20 year experience in building best-in-class data protection and hosting services, Keepit is pioneering the way to secure and protect cloud data at scale.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Graylog Achieves ‘Leader’ and ‘Outperformer’ Positioning in GigaOm’s 2025 SIEM Report

HOUSTON — August 1, 2025 — Graylog, the platform built for SIEM, API protection, and Centralized Log Management, today announced its recognition as a ‘Leader’ and ‘Outperformer’ in GigaOm’s 2025 Radar Report for Security Information and Event Management (SIEM).

Recognition Highlights from GigaOm

The Graylog Security platform, built on the robust Graylog foundation, was specifically recognized for several key differentiators that are critical for modern SOC teams:

  • Alarm Fidelity & Self-Tuning: Recognized for superior accuracy and the platform’s ability to optimize itself.
  • Data Analysis & Risk Scoring: Acknowledged for its advanced data analysis capabilities and effective risk scoring based on enriched data.
  • Anomaly Detection: Highlighted for its strong anomaly detection modules that receive, normalize, and enrich log data.
  • Innovation & Evolution: Recognized for continuously evolving the platform, including the capability to filter incoming logs through streams and apply rules via pipelines.

“The SIEM market is evolving quickly as security teams face unprecedented data volumes, increasingly sophisticated threats, and complex compliance demands. Our Graylog Security platform stands out by delivering powerful analytics and streamlined workflows without the complexity and cost that have previously held the industry back. We are honored that GigaOm continues to recognize our ability to innovate.”

— Seth Goldhammer, VP of Product Management at Graylog

The Core Value Proposition

Graylog is committed to providing high-impact tools that directly address the real challenges faced by today’s lean security teams. The platform ensures that analysts get the speed, clarity, and confidence needed to detect and respond to threats before they escalate.

Read the Full GigaOm Radar Report

About Graylog
At Graylog, our vision is a secure digital world where organizations of all sizes can effectively guard against cyber threats. We’re committed to turning this vision into reality by providing Threat Detection & Response that sets the standard for excellence. Our cloud-native architecture delivers SIEM, API Security, and Enterprise Log Management solutions that are not just efficient and effective—whether hosted by us, on-premises, or in your cloud—but also deliver a fantastic Analyst Experience at the lowest total cost of ownership. We aim to equip security analysts with the best tools for the job, empowering every organization to stand resilient in the ever-evolving cybersecurity landscape.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

RHEL 10 Overview: Features, Updates, and Derivatives Comparison

RHEL 10 was designed to address the most pressing challenges in modern IT infrastructure, positioning itself as the definitive operating system for organizations navigating digital transformation, hybrid cloud adoption, and increasingly complex security landscapes.

In this blog, we’ll explore the new features in RHEL 10 and explain how it compares to RHEL 9. We’ll also consider its value within the broader Enterprise Linux ecosystem of RHEL derivatives, to help organizations determine if a RHEL subscription is still worth the investment. 

Table of Contents

  1. About the RHEL 10 Release
  2. RHEL 10 Features and Updates
  3. Comparing RHEL 10 vs. RHEL 9
  4. RHEL Derivatives Ecosystem: Rocky Linux 10 and AlmaLinux 10
  5. Is RHEL Still Worth the Cost?
  6. Final Thoughts

Back to top

About the RHEL 10 Release

RHEL 10 was released on May 20, 2025 and goes by the code name “Coughlan” like the upstream CentOS Stream 10 release which came out in December 2024. RHEL 10 is based on Fedora 40 and will be supported until 2035. 

RHEL 10 is focused on three core pillars: enhanced security, cloud-native optimization, and AI-powered automation. The release targets a diverse range of enterprise applications, including containerized workloads, hybrid cloud operations, and Dev Ops workflows, to support organizations transitioning toward more agile, secure, and scalable infrastructure models.

Back to top

RHEL 10 Features and Updates

For a complete list of new RHEL 10 features, as well as removed ones, refer to the official release notes. In this section, we will highlight the most impactful changes.

Security Enhancements

  • Post-Quantum Cryptography (PQC) Integration represents perhaps the most significant security advancement. This FIPS-compliant implementation defends against sophisticated “harvest now, decrypt later” attacks, where adversaries collect encrypted data today with the intention of decrypting it using future quantum computing capabilities. Organizations handling sensitive data or operating in regulated industries will find this protection essential for long-term data security.
  • Improved SELinux delivers enhanced flexibility and usability without compromising security. The updated implementation offers more intuitive configuration options, enhanced auditing capabilities, and improved troubleshooting tools, making it easier for system administrators to implement and maintain robust access controls.
  • Encrypted DNS integration includes both DNS over HTTPS (DoH) and DNS over TLS (DoT) protocols, protecting DNS queries from interception and manipulation. This capability becomes increasingly critical as organizations implement zero-trust security models.
     

NEW: CIS-Benchmarked Hardened Images 

OpenLogic now provides Rocky Linux and AlmaLinux images hardened according to CIS Benchmarks (Level 2) for VMs and containers, making it easier than ever to meet compliance requirements. 

Explore Hardened ImagesSee Latest Releases

 

Performance and Hardware Upgrades

  • The updated Linux Kernel 6.12.0 provides foundational performance improvements and expanded hardware compatibility. This kernel update ensures optimal performance on the latest server hardware while maintaining stability across diverse infrastructure environments.
  • Support for New Hardware includes comprehensive compatibility with next-generation processors, storage systems, and networking equipment. This expanded support ensures organizations can leverage cutting-edge hardware while maintaining their existing RHEL environment.

Cloud Integration and Hybrid Cloud Support

  • Image Mode for RHEL (bootc) revolutionizes deployment flexibility by enabling OS deployment as a container image directly to hardware, virtual machines, or cloud environments. This container-native approach streamlines deployment processes and enhances consistency across diverse infrastructure platforms.
  • Enhanced Compatibility with Major Cloud Providers delivers deeper integration with AWS, Azure, and Google Cloud Platform. These optimizations reduce deployment complexity and improve performance when running RHEL workloads in public cloud environments.
  • Optimized for OpenShift improves integration with Red Hat OpenShift, enabling more efficient container orchestration and management. Organizations leveraging Kubernetes will benefit from enhanced performance and simplified operations.

Developer Tools and System Administration Improvements

  • Updated Application Streams include newer versions of essential programming languages: Python 3.12, Perl 5.40, Go 1.23, and GCC 14.2. These updates ensure developers have access to the latest language features and performance improvements.
  • RHEL Lightspeed integrates generative AI directly into the platform, offering context-aware guidance for system administration tasks. This AI-powered assistance reduces the learning curve for complex administrative operations and improves operational efficiency.
  • Expanded Ansible System Roles automate configuration management, application deployment, and infrastructure provisioning across diverse environments. These roles significantly reduce manual administrative overhead while ensuring consistent configurations.
  • Improved Podman and Buildah Support streamlines building, testing, and deploying containerized applications.

Back to top

Comparing RHEL 10 vs. RHEL 9

The transition from RHEL 9 to RHEL 10 introduces several fundamental changes that will impact user experience and operational capabilities. 

Feature AreaRHEL 9RHEL 10
KernelLinux Kernel 5.14Linux Kernel 6.12
SecuritySELinux, OpenSSL 3.0Post-Quantum Cryptography, Enhanced SELinux, Encrypted DNS
Developer ToolsPython 3.9, Node.js 16Python 3.12, Perl 5.40, Go 1.23
System ManagementWeb Console, Basic Ansible RolesEnhanced Web Console, Comprehensive Ansible Roles, AI-Powered Lightspeed
Supported Architecturesx86-64-v2, ARM64, IBM Power, IBM Zx86-64-v3, ARM64, IBM Power, IBM Z, RISC-V Developer Preview
FocusStability, consistency, foundational hybrid cloud readinessAI integration, post-quantum security, container-native OS deployments

The most significant architectural change involves dropping x86-64-v2 support in favor of x86-64-v3 baseline requirements. This change improves performance on modern hardware but may impact organizations running older infrastructure. 

The shift toward AI integration and container-native operations reflects Red Hat’s strategic focus on emerging technologies and modern deployment patterns. Organizations planning upgrades should evaluate their current infrastructure compatibility and strategic technology direction.
 

Get the Decision Maker’s Guide to Enterprise Linux

Compare security, stability, features, and use cases for commercial Enterprise Linux distributions like RHEL, Oracle Linux, and SUSE Linux Enterprise (SLE) and open source alternatives like CentOS Stream, Debian, Ubuntu, Rocky Linux and AlmaLinux in our free guide.

Read Now

Back to top

RHEL Derivatives Ecosystem: Rocky Linux 10 and AlmaLinux 10

Both AlmaLinux and Rocky Linux continue building their distributions using CentOS Stream as their primary upstream source, supplemented by publicly available resources and RHEL sources obtained through Red Hat’s licensing framework.

These distributions maintain Application Binary Interface (ABI) compatibility with RHEL 10, ensuring applications compiled for RHEL 10 will execute seamlessly on AlmaLinux 10 and Rocky Linux 10 without modification. This compatibility provides organizations with deployment flexibility while maintaining application integrity.

AlmaLinux 10 (codename “Purple Lion”) was released on May 27 (one week after RHEL 10) and offers a unique advantage through its continued support for x86-64-v2 architecture, making it viable for organizations with older hardware that cannot meet RHEL 10’s x86-64-v3 requirements. This capability extends infrastructure lifespan and reduces hardware replacement costs.

Rocky Linux 10 (codename “Red Quartz”) came out on June 11 and includes support for RISC-V computers. 

Both distributions benefit from active community ecosystems and third-party commercial support options, often at significantly lower costs.

Back to top

Is RHEL Still Worth the Cost?

Weighing RHEL’s value proposition requires balancing comprehensive enterprise capabilities against significant licensing costs and vendor lock-in risk.

RHEL Advantages

  • Enterprise-Grade Stability and Reliability: Rigorous testing and quality assurance processes guarantee a stable platform for mission-critical workloads.
  • Predictable Lifecycle: Each major RHEL release is supported for 10 years, which means extended availability of security fixes and patches.
  • Support: RHEL subscriptions comes with 24/7 technical support with SLAs, which is invaluable during critical incidents or for complex deployments.
  • Security and Compliance: RHEL is consistently updated with the latest security patches, including proactive vulnerability remediation. Organizations in regulated industries particularly benefit from RHEL’s comprehensive certifications that ensure security and compatibility with various other solutions.
  • Integrated Ecosystem: RHEL subscriptions often include access to other Red Hat tools for lifecycle management, analytics, and automation that your organization might also want to utilize.  

RHEL Derivatives Benefits

  • No License Costs: This is by far the most compelling differentiator because it eliminates a substantial line item from IT budgets, freeing up resources for other projects and investments.
  • Freedom and Flexibility: By using RHEL derivatives, organizations can avoid getting locked into the RHEL ecosystem of products and retain greater control over their infrastructure.
  • Binary Compatibility: Applications designed for RHEL 10 should be able to run without modification.
  • Community and Third-Party Support: Rocky Linux and AlmaLinux have very active communities and good documentation, and commercial support vendors like OpenLogic can provide expert, 24/7 SLA-backed Enterprise Linux support for less than the cost of a RHEL subscription.
  • Niche Use Cases: AlmaLinux 10’s continued support for x86-64-v2 makes it a more viable option for organizations that cannot meet RHEL 10’s x86-64-v3 baseline and want to defer hardware replacement costs.

Back to top

Final Thoughts

With its advanced security capabilities, AI-powered administration, and comprehensive cloud integration, RHEL 10 and its derivatives set a new benchmark for Enterprise Linux distributions. The choice ultimately depends on organizational priorities: Enterprises requiring extensive certifications and preferring integrated management tools may find the ROI for RHEL worthwhile. Organizations prioritizing cost optimization and operational flexibility may find Rocky Linux 10 or AlmaLinux 10 more attractive, particularly when combined with third-party commercial support.

About Perforce
The best run DevOps teams in the world choose Perforce. Perforce products are purpose-built to develop, build and maintain high-stakes applications. Companies can finally manage complexity, achieve speed without compromise, improve security and compliance, and run their DevOps toolchains with full integrity. With a global footprint spanning more than 80 countries and including over 75% of the Fortune 100, Perforce is trusted by the world’s leading brands to deliver solutions to even the toughest challenges. Accelerate technology delivery, with no shortcuts.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.