Globe Telecom Redefines Telco Security to Accelerate AI Innovation with CrowdStrike
Challenges
- Securing IT and core telecommunications network infrastructure from attack
- Allowing widespread adoption of AI internally
- Meeting security and regulatory compliance requirements
Results
- Decade-long partnership with CrowdStrike ensuring Globe is ‘safe to innovate’
- Consolidated security enabling rapid deployment of new services and features
- 100% endpoint protection coverage and visibility
- Security posture supporting 90% internal adoption of AI tools and applications
CrowdStrike Solutions
- Falcon Insight XDR
- Falcon Data Security
- Falcon Cloud Security
- Falcon Counter Adversary Operations
- Falcon Exposure Management
- Falcon Next-Gen SIEM
Globe Telecom is one of the Philippines' leading telecommunications companies, with networks connecting 70 million mobile subscribers. Cybersecurity is essential to protecting the critical infrastructure and digital services these customers rely on every day.
Globe, which is one of CrowdStrike’s earliest Southeast Asian customers, deployed the CrowdStrike Falcon® platform and embraced managed threat hunting through CrowdStrike Falcon® Adversary OverWatch. Its early investment became the foundation of a decade-long partnership that now spans much of Globe's security environment and supports its ambitious AI transformation.
"We've always positioned ourselves as a trailblazer, willing to go against the grain," said Anton Bonifacio, Chief Intelligence and Trust Officer at Globe Telecom. "CrowdStrike has been there with us, helping challenge conventional thinking and push the industry forward."
Breaking Down Barriers Between IT and Network Security
Telecoms have traditionally treated corporate IT and core network infrastructure as separate security environments. While IT security teams protect conventional computing systems, network operations teams prioritize availability and resilience, often avoiding changes to mission-critical infrastructure. These include the installation of security software, which has historically raised concerns around reliability and uptime.
Globe recognized the risks in that approach. Beneath specialized telecommunications equipment, many network systems run the same operating systems found in conventional IT environments. This means they share many of the same vulnerabilities. Threat actors can exploit those weaknesses regardless of how a telecom organizes its security teams.
"Historically, telcos have only been protecting one side of the fence," said Bonifacio. "The same vulnerabilities that affect the IT stack also affect the network stack."
Globe took a different approach by establishing centralized cybersecurity leadership responsible for both environments. It was also one of the early telecommunications providers to deploy CrowdStrike endpoint detection and response (EDR) across its core network infrastructure, including systems from major equipment vendors.
This gave Globe broader visibility and protection across traditionally isolated environments, which strengthened its ability to detect and respond to threats across the business.
"If I could keep only one security technology, it would be CrowdStrike EDR with OverWatch," said Bonifacio. "That's how important they've become to our security strategy."
Consolidating Security to Accelerate Innovation
What began with endpoint protection and managed threat hunting has evolved into a broader platform strategy. Today, Bonifacio estimates that 75% of Globe's security stack resides within the Falcon platform. Consolidation has helped Globe simplify security operations and introduce new protections without deploying additional software.
One example is Globe's migration from a legacy data loss prevention (DLP) solution to CrowdStrike Falcon® Data Security. Bonifacio estimates a traditional deployment could have required 3-6 months of agent rollout. Because the single Falcon sensor was already deployed in Globe's environment, the team could activate the capability and immediately focus on configuring policies.
"It's a flick of a switch," said Bonifacio. "Instead of spending months getting the technology deployed, we can focus on the use cases and get straight to value."
Consolidation has also helped Globe optimize security spending. By avoiding costs associated with overlapping technologies, the company can redirect investments toward new capabilities as its needs evolve. As an example, Globe is now moving more security use cases into CrowdStrike Falcon® Next-Gen SIEM, which brings data into a unified environment where security teams can more efficiently develop workflows and playbooks.
These improvements have helped Globe scale its security operations without significantly expanding its team. Even as its responsibilities have grown, security staffing has remained relatively stable.
"We've been able to expand our scope without adding a lot more people," said Bonifacio. "The technology scales with us."
Creating the Confidence to Embrace AI
When generative AI began transforming business operations, Globe used its established security controls to encourage experimentation. Today, ~90% of Globe employees use AI. Adoption extends beyond generative AI assistants; business teams use AI to develop software themselves. This approach is helping Globe accelerate innovation and reduce its dependence on traditional software vendors.
"The safer you feel, the higher you can jump from an innovation perspective," said Bonifacio.
Globe's AI transformation has also reshaped its leadership structure. As Chief Intelligence and Trust Officer, Bonifacio oversees cybersecurity, data, and AI. Bringing these functions together helps the company innovate securely.
CrowdStrike remains central to that strategy. The Falcon platform provides visibility and protection across the systems supporting Globe's growing AI ecosystem. Its endpoint and exposure management capabilities help Globe maintain strong security foundations as employees ship new apps and AI-powered threats evolve.
"A lot of securing AI still comes down to getting the security basics right," he said. "Build strong foundations first. Those are investments you won't regret."
Globe also benefits from CrowdStrike's deep familiarity with its environment, developed through nearly a decade of partnership.
"CrowdStrike has built an institutional knowledge of our environment," said Bonifacio. "That gives us confidence as we move into this new world of AI."
Extending Protection Across Mission-Critical Networks
Globe's commitment to securing its telecommunications infrastructure continues to shape its security strategy. As adversaries become faster and more sophisticated, core networks present particular challenges. Unlike modern IT environments, telecommunications infrastructure often relies on legacy systems that are difficult to update without disrupting essential services.
Globe is working with CrowdStrike to strengthen protection across these environments while preserving the reliability its customers depend on. The company is also helping advance industry thinking about how endpoint security can be deployed safely in telecom networks.
For Bonifacio, that work reflects the same philosophy that brought Globe and CrowdStrike together nearly a decade ago: Challenge conventional thinking, build strong security foundations, and use that confidence to drive innovation.
"People thought we were crazy for putting EDR into mission-critical telecommunications networks," concluded Bonifacio. "But we knew we had to. And CrowdStrike has been there with us throughout that journey."
-
G.James
G.James Strengthens Identity Security and Protects Business Continuity with CrowdStrike
View story -
-