Summary
Plarium used Tonic to connect security findings with business context and focus on the exposures that matter most. The team can now identify asset owners immediately instead of spending days tracking them down, automate remediation workflows, and uncover hidden gaps in identity and security control coverage. Plarium’s CISO estimates that Tonic has cut repetitive manual work by about 50%.
Too many vulnerabilities, too little context
Plarium Global Ltd., a part of Modern Times Group MTG AB, creates mobile and PC games for more than 500 million registered gamers. Its portfolio spans 20 titles, with more than 1,300 specialists across seven offices and development studios.
For Oren Zenescu, Group CISO at Modern Times Group mTG AB, operating at this scale created a familiar security challenge: thousands of vulnerability findings, but not enough context to determine what actually mattered.
Technical severity alone could not show whether a vulnerable asset supported a crown jewel, critical service, or core business process. Plarium also needed to understand whether an exposure was reachable, exploitable, or internet-facing, what security controls were already protecting it, and which business processes could be affected.
Ownership created another bottleneck. Identifying the right asset owner could take days and was often based on imperfect signals such as the last user to log in. That slowed assignment, ticket creation, and ultimately remediation.
“Going over thousands and thousands of vulnerabilities isn’t helpful. I need to quickly understand the holistic picture and where we need to remediate, fast.”
Oren Zenescu, Group CISO
Business context turns findings into priorities
Plarium connected Tonic to business systems ranging from spreadsheets to SaaS applications. Tonic correlated that data across servers, workloads, users, identities, business functions, and processes, then connected it back to security findings.
This gave Plarium two complementary views of the same exposure. The business view showed whether an asset supported a crown jewel or critical process. The cyber view showed whether the exposure was reachable, exploitable, internet-facing, or mitigated by another security control.
Bringing those signals together allowed the team to cut through vulnerability noise and focus remediation on the exposures that mattered most.
“Tonic helps us answer the question of what we don’t know that we don’t know”
Oren Zenescu, Group CISO
From ownership guesswork to action
Prioritization was only the first step. Tonic used Plarium’s connected organizational and security data to identify owners and associate them with the right assets.
What previously took days could now happen immediately. Ownership assignment and ticket workflows were automated, reducing the manual handoffs that delayed remediation and helping the team move more quickly from identifying an exposure to getting it fixed.
Oren estimates that Tonic saves about 50% of the time previously spent on repetitive manual work, while the same automation has helped reduce mean time to remediation.
“What I like best is the simplicity. It makes this complicated data fabric simple and easy to digest for me and my team.”
Oren Zenescu, Group CISO
Finding the gaps other tools miss
Connecting security and organizational data also exposed risks that were difficult to see when looking at individual systems in isolation.
Tonic surfaced active identities belonging to people who had left Plarium, including access to sensitive systems. It identified idle servers, computers, and other resources that remained online, carried vulnerabilities, and no longer served a useful purpose.
The same connected view highlighted gaps in security-control coverage. If EDR covered 80% of assets, for example, the team could identify the uncovered 20% and apply the same analysis across other controls. Attack-path analysis provided another perspective on risks that routine security operations could miss.
Security connected to the business
For Plarium, the result is more than a cleaner vulnerability queue. Tonic connects findings to the business services and critical processes they can affect, helping the security team understand which exposures matter, identify who owns them, and move remediation forward faster.
The result is less manual work, faster remediation decisions, and a clearer understanding of where cyber risk intersects with the business.
About Plarium
Plarium Global Ltd. is dedicated to creating the best mobile and PC experience for their community of over 500 million mid-core and casual registered gamers worldwide. Their diverse portfolio includes 20 games ranging from hardcore RPGs to casual adventures, featuring acclaimed titles such as RAID: Shadow Legends, Mech Arena, Vikings: War of Clans, Lost Island: Blast Adventure, and the Stormfall franchise.
