Seqrite Automates Enterprise Cybersecurity with Predictive Analytics by Using Amazon OpenSearch Service

With more than 9 million endpoints served, Quick Heal Technologies has been protecting customers in India from cybersecurity threats for nearly 30 years. The independent software vendor (ISV) serves both retail consumers and corporate entities, and is proud to be the first security ISV under the nationwide Make in India scheme promoting homegrown products. 

Quick Heal Technologies’ enterprise product suite, operating under the Seqrite brand, includes software-as-a-service (SaaS) offerings such as endpoint protection, endpoint detection and response (EDR) and extended detection and response (XDR), zero trust network access (ZTNA), and data privacy. When it began building its solutions on the cloud, Quick Heal sought comprehensive visibility across its customers’ IT environments, including on-premises workloads. In the world of cybersecurity, always-on availability is crucial. Seqrite chose to work with AWS in 2018, citing platform reliability and the breadth of technology available on AWS—particularly managed services. All of this has helped Seqrite launch and scale new solutions faster.

Since Seqrite launched in 2018, its data volumes have risen exponentially. Seqrite’s XDR, which is AV-TEST certified, analyzes terabytes of current and historical data each day, using Amazon Data Firehose and Amazon Kinesis Data Streams to load data from all customer endpoints, emails, and networking infrastructure into its SaaS solutions. The guardrails built into AWS services ensure CERT-In data security and compliance requirements under India’s Ministry of Electronics and Information Technology.

For processing big-data workloads, Seqrite uses managed services including Amazon EMR and Amazon OpenSearch Service. These services perform critical functions in the Seqrite XDR product, such as hunting for zero-day security threats. In this case, the ISV uses Amazon OpenSearch Service with Amazon EMR for real-time anomaly detection and its proprietary event correlation engine. To ensure minimal damage in case of an attack, early threat detection and response are key elements of the company’s SaaS. Predictive analytics is another important feature, evaluating suspicious data patterns that might be the first signs of an attack in progress.

Netra Deshpande, vice president of engineering at Quick Heal Technologies, says, “Implementing effective predictive analytics is one of the most complex problems in cybersecurity architecture, and Amazon OpenSearch Service is at the heart of solving it. The data we accumulate each day needs to be analyzed through hundreds of thousands of searches and parallel queries, and Amazon OpenSearch Service is helping us perform analytics in real time.” As the company expands its presence and product portfolio, Seqrite has found AWS to be a “strong pillar of support,” according to Deshpande. The ISV consults with the AWS team regularly when selecting technology for its use cases. It also relies on AWS expertise to optimize architecture, ensuring its increasing data volumes do not disproportionately drive up costs.