Mercato Group’s legacy VPN gave 8,000 employees broad access to internal systems across 20 countries. Once connected, a single stolen password could reach far more than its owner ever needed.
The company wanted to remove that risk without interrupting trading in stores, warehouses or head offices, including during the critical peak season.
Identity foundation
We consolidated sign-in behind one identity platform and rolled out phishing-resistant MFA in regional waves. Local champions and clear communications kept support requests manageable throughout.
Application migration
Applications moved one group at a time from network access to per-app policies that checked identity and device health. Trading-critical systems were scheduled around peak periods, with a tested fallback for every change.
Results
All 8,000 employees now work through per-app access, and the VPN has been retired. Compromised credentials can no longer open the wider network, while every access decision is logged for monitoring and audit.
Our people got a simpler sign-in and we got far tighter control. It is rare for a security project to deliver both.
Recommended Projects
Stay Protected With Next-Generation Security
Protect your data, apps and users with 24/7 monitoring, fast incident response and audit-ready security built for growing teams.