Seqrite Automates Enterprise Cybersecurity with Predictive Analytics by Using Amazon OpenSearch Service

With more than 9 million endpoints served, Quick Heal Technologies has been protecting customers in India from cybersecurity threats for nearly 30 years. The independent software vendor (ISV) serves both retail consumers and corporate entities, and is proud to be the first security ISV under the nationwide Make in India scheme promoting homegrown products. 

Quick Heal Technologies’ enterprise product suite, operating under the Seqrite brand, includes software-as-a-service (SaaS) offerings such as endpoint protection, endpoint detection and response (EDR) and extended detection and response (XDR), zero trust network access (ZTNA), and data privacy. When it began building its solutions on the cloud, Quick Heal sought comprehensive visibility across its customers’ IT environments, including on-premises workloads. In the world of cybersecurity, always-on availability is crucial. Seqrite chose to work with AWS in 2018, citing platform reliability and the breadth of technology available on AWS—particularly managed services. All of this has helped Seqrite launch and scale new solutions faster.

Since Seqrite launched in 2018, its data volumes have risen exponentially. Seqrite’s XDR, which is AV-TEST certified, analyzes terabytes of current and historical data each day, using Amazon Data Firehose and Amazon Kinesis Data Streams to load data from all customer endpoints, emails, and networking infrastructure into its SaaS solutions. The guardrails built into AWS services ensure CERT-In data security and compliance requirements under India’s Ministry of Electronics and Information Technology.

For processing big-data workloads, Seqrite uses managed services including Amazon EMR and Amazon OpenSearch Service. These services perform critical functions in the Seqrite XDR product, such as hunting for zero-day security threats. In this case, the ISV uses Amazon OpenSearch Service with Amazon EMR for real-time anomaly detection and its proprietary event correlation engine. To ensure minimal damage in case of an attack, early threat detection and response are key elements of the company’s SaaS. Predictive analytics is another important feature, evaluating suspicious data patterns that might be the first signs of an attack in progress.

Netra Deshpande, vice president of engineering at Quick Heal Technologies, says, “Implementing effective predictive analytics is one of the most complex problems in cybersecurity architecture, and Amazon OpenSearch Service is at the heart of solving it. The data we accumulate each day needs to be analyzed through hundreds of thousands of searches and parallel queries, and Amazon OpenSearch Service is helping us perform analytics in real time.” As the company expands its presence and product portfolio, Seqrite has found AWS to be a “strong pillar of support,” according to Deshpande. The ISV consults with the AWS team regularly when selecting technology for its use cases. It also relies on AWS expertise to optimize architecture, ensuring its increasing data volumes do not disproportionately drive up costs.

Seqrite has made its customers’ diverse IT environments secure with its software’s high visibility and detection capabilities. Its SaaS mines about 3 TB of data each day, analyzing data in near real-time to find threats and automate responses using artificial intelligence and machine learning (AI/ML). Customers benefit from advanced threat detection with minimal human effort, in addition to 99.999 percent availability. Vishal Salvi, chief executive officer of Quick Heal Technologies, says, “Seqrite's XDR Event Correlation Engine, powered by Amazon OpenSearch Service, reduces manual effort by 50% while improving threat detection and response times. XDR secures IT environments across cloud and on-premises setups, offering scalable and compliant security solutions that adapt to modern business needs.”

Amol Ashtekar, director of product management at Seqrite, says, “Our customers appreciate the agility we show in responding to their feedback. This ties into the support we receive from AWS and its teams, reports, and rich technology offering. Consolidating our technology on AWS has accelerated our go-to-market velocity and helps us to maintain focus on cybersecurity and on our customers.”

Recently, Seqrite Technologies began selling Seqrite solutions on AWS Marketplace—and discussions are ongoing about expanding the business abroad. The ISV is also looking to incorporate generative AI technology with Amazon Bedrock for two use cases: to enhance its products’ automated response to threats, and to give customers with little to no cybersecurity experience proactive guidance on using its products.