# National Telecom Operator

URL: https://www.deepinfo.com/customers/telecommunications-national-operator/

Customer story · Telecommunications · Türkiye

## A National Telecom Operator Monitors Its Surface at Carrier Scale.

A Türkiye-based national operator with tens of millions of subscribers and tens of thousands of public-facing assets needed external monitoring that keeps up with its footprint. Tools built for smaller surfaces hit their limits at that volume.

[Request demo](https://www.deepinfo.com/request-demo/)

### Nearly Two Decades of M&A Built One Footprint.

A leading Türkiye-based operator serving tens of millions of mobile and fixed-line subscribers, with subsidiary brands in MVNO, broadband and digital services.

Its external surface spans customer portals, billing systems, partner integrations, network operations interfaces and the infrastructure of acquired subsidiaries. It is large by industry standards, and so is the list of groups interested in it.

- **Revenue**: Multi-billion USD
- **Subscribers**: Tens of millions
- **Subsidiary brands**: MVNO, broadband, digital
- **Markets**: Home market and regional

### A Partial Inventory Against Sector-Specific Adversaries.

Inventory

#### No Complete List

Tens of thousands of public-facing assets, and an inventory that did not hold all of them.

Scanning

#### Coverage in Bursts

Scanning was sporadic, so changes between scans went unseen.

Intelligence

#### Feeds Without Focus

Threat intelligence did not follow the groups that target telecom: state-sponsored campaigns, SIM-swap fraud rings and infrastructure-pivot operators.

### Discovery, Scanning and Intelligence at Full Scale.

The operator deployed the Deepinfo Platform across its full footprint. [Asset Discovery](https://www.deepinfo.com/platform/easm/smart-asset-discovery/) found assets under subsidiary brands that nobody was monitoring, and [Continuous Scanning](https://www.deepinfo.com/platform/easm/continuous-scanning/) now covers every asset across all data layers.

[Threat Actor Intelligence](https://www.deepinfo.com/platform/cti/threat-actor-intelligence/) is scoped to the groups that target telecom. [Fraudulent Domain Monitoring](https://www.deepinfo.com/platform/brp/fraudulent-domain-monitoring/) watches for domains that impersonate the operator, and confirmed ones go to [Managed Takedown](https://www.deepinfo.com/platform/brp/managed-takedown/).

### What Changed at Carrier Scale.

#### Inventory Expanded

Discovery surfaced subsidiary and acquired infrastructure across the carrier footprint.

#### Each Change on Record

Each asset keeps a history per data layer, so a changed DNS record, certificate or open port shows up with the date it changed.

#### Scale Without Degradation

Continuous scanning kept its depth as the inventory grew.

#### Intelligence Scoped to Telecom

Actor tracking follows the groups that target operators, not a generic feed.

#### Impersonation Handled Continuously

Customer-impersonation domains are caught and routed to Managed Takedown.

#### Subsidiaries as Portfolios

Each subsidiary brand is its own portfolio, rolled up into group dashboards.

### Large Surfaces in Other Sectors.

- [An industrial conglomerate](https://www.deepinfo.com/customers/industrial-conglomerate/) (Customer story · Industrial): 30+ subsidiary brands, each a portfolio, scored on one scale.
- [A metropolitan municipality](https://www.deepinfo.com/customers/municipal-government/) (Customer story · Government): Lookalikes of citizen-facing services caught and taken down.
- [A cybersecurity ratings provider](https://www.deepinfo.com/customers/cybersecurity-ratings-provider/) (Customer story · Cybersecurity): The data layer of a ratings product, sourced from the Deepinfo index.

### See Your Carrier Surface at Scale.

Book a walk-through scoped to your subsidiary brands and your full footprint.

[Request demo](https://www.deepinfo.com/request-demo/)