CASE STUDY

When Security Leads: Redefining A New Standard In Financial Mortgage Protection

How Churchill Mortgage leveraged Bulletproof's Managed Security Services to elevate their security posture, improve response times, and reduce costs through a customized, Microsoft-Native Security Operations Center (SOC) solution.

This case study demonstrates how the collaboration not only secured financial operations but also reinforced the firm’s core values - delivering results beyond expectations.

 

 

Churchill_Horizontal_White_Logo

Looking for a PDF? You can access it here.

Download a PDF version as a takeaway and share with your coworkers.

ACCESS PDF

The Client

Churchill Mortgage is a privately owned, customer-first mortgage provider licensed in 48 states. With over 30 years of experience helping Americans achieve the dream of homeownership, they’ve built a reputation grounded in trust, transparency, and uncompromising security. By implementing robust safeguards to protect sensitive data and consistently putting the needs of customers, stakeholders, and employees first, they ensure confidence at every step of the home financing journey.

The Situation

A Customer-First Lender with High Stakes

As the company transitioned its IT infrastructure fully to the cloud, the stakes grew higher. Handling sensitive financial and personally identifiable information (PII) across numerous third-party systems and vendors, Churchill required a dynamic, integrated approach to cybersecurity adapting to changes in technology and cyber threats. The mandate was clear: protect data, gain real-time visibility on security environment, consolidate tools, and find a partner that understood their unique needs.

That partner was Bulletproof.

A Fragmented Security Environment

Churchill Mortgage faced growing challenges with their former Managed Security Services Provider (MSSP). And with tight internal security resources to manage the security program—VP of Cybersecurity, Michael Laudenslager needed extra support to manage the increasing demand.

Michael Laudenslager, Churchill Mortgage“At Churchill Mortgage, choosing the right Managed Security Services Provider is essential to keep our customers safe in a constantly changing cybersecurity world. We’re focused on doing what’s right for our clients, so partnering with an MSSP that shares our mission is key.”

Michael Laudenslager, VP of Cybersecurity, Churchill Mortgage

The Challenges

INCIDENT RESPONSE

Limited Real-Time Threat Detection Response

Delayed response to critical alerts increased operational risk in the regulated mortgage sector.

operations

Tool Overload

Using multiple disconnected tools led to inefficiency and higher costs.

alert (1)

Data Sovereignty Concerns

The transfer of logs and critical data outside Churchill's environment elevated risk levels and diminished operational visibility.

partner

Strategic Long-Term Partnership

Churchill needed more than limited, one-size-fits-all solutions. They sought a partner to fully support their Microsoft-first ecosystem and deliver customized offerings for both their organization and the wider industry.

partner (2)

Limited Access to Security Experts

The small in-house IT security team made it difficult to find available experts.

The Catalyst

The turning point came during a Microsoft SecOps Workshop led by Bulletproof. During the assessment, the teams identified two separate malware incidents actively present in Churchill’s environment—validating Michael’s concerns that the current security approach was falling short.

It was a clear signal that the status quo was no longer sustainable, and that immediate change was necessary. Churchill wasn’t just looking to upgrade the technology stack, but to find a strategic partner who could deliver a tailored, white-glove security experience grounded deep in Microsoft expertise.

"Although advanced security tools were in place, our integration was not fully effective, resulting in some threats not being detected. Collaboration with the Bulletproof team during the Microsoft SecOps Workshop identified malware instances that our current MSSP did not detect, which were linked to insufficient controls during the assessment. This process underscored the importance of aligning security measures with both customer needs and industry standards. Such assessments are essential for maintaining a proactive security posture."

Michael Laudenslager, Churchill Mortgage
Michael Laudenslager
Vice President of Cybersecurity, Churchill Mortgage

The New MSSP: Bulletproof

Michael launched a thorough evaluation of Microsoft’s top Managed Security Services Providers (MSSPs). He conducted in-depth research—speaking with Microsoft experts, attending a range of webinars, comparing solution fact sheets, and participating in events.

A referral from Microsoft’s Cloud Security Solutions Specialist, further reinforced Bulletproof’s reputation as a trusted partner. Throughout his due diligence, Bulletproof consistently surfaced in conversations with Microsoft security advisors and industry peers—standing out as a credible, proven choice.
 

What Set Bulletproof apart:

Compliance Review-1

Extensive Microsoft Integration Expertise

As a Microsoft Intelligent Security Association (MISA) Security Trailblazer winner (2024), Microsoft Global Security Partner of the Year (2021) and long-standing Solutions Partner, Bulletproof offered seamless integration with Churchill’s existing Microsoft tools, including Microsoft Sentinel and Defender.

Compliance Review (2)

Tailored Configuration

Bulletproof committed to co-developing customized alert rules and automation protocols specifically aligned to the risks and regulations of the mortgage industry.

Compliance Maturity-1

Personalized, Hands-On Support

Support that feels like you're our only client. Churchill was assigned to a dedicated team of technical experts and account managers, delivering collaborative, high touch experiences every step of the way.

Compliance Review (3)

A Partnership Built on Trust

With a security-first mindset, open communication, and consistent thought leadership, Bulletproof proved to be a value-aligned partner Churchill could rely on.

It takes a team. Michael partnered closely with Dan Jones, Churchill’s CIO, to bring the Bulletproof recommendation to the board. Together, they built a compelling case grounded in cost efficiency, security modernization, and long-term strategic alignment. The board unanimously approved the move—underscoring that cybersecurity wasn’t just an IT priority, but a core business imperative.

The Solution

Bulletproof's Managed Security Service (MxDR), Bulletproof 365 Enterprise

Churchill Mortgage deployed Bulletproof 365 Enterprise (MXDR), a fully managed extended detection and response solution built on the Microsoft Security platform. Combining cutting-edge technology with expert oversight, it ensures robust security across clouds, network, and endpoint environments. 
 
Leveraging Microsoft’s industry-leading security tools, including Microsoft Sentinel, Defender for Endpoint, Defender for Office 365, and Entra ID Protection, the service delivers continuous threat detection, alert triage, and rapid incident response.
 

Key components of the solution:

  • Microsoft Sentinel SIEM

  • Microsoft Defender for Endpoint, Cloud Apps, and Identity

  • Entra ID Protection and Conditional Access

  • Continuous vulnerability assessments

  • Custom alerting rules tailored to Churchill’s environment

  • 24/7 threat monitoring and response by Tier 1-3 SOC analysts

Bulletproof 365 Enterprise (MSSP) Proactive Protection

The deployment also included:

Security Posture Management

Security Posture Management

Proactive identification and remediation of misconfigurations and vulnerabilities.

Automated Containment

Automated Containment

Using SOAR playbooks to reduce dwell time.

Collaborative Onboarding

Collaborative Onboarding

Bulletproof worked directly with Churchill to co-architect the deployment, ensuring alignment from day one.

The Impact

In the months following implementation, Churchill Mortgage saw measurable business benefits:

Faster Response Times and 24/7 security monitoring

Faster Response Times & 24/7 Security Monitoring

50% faster response time, alerts now result in actionable insights, triaged and addressed in near real-time. Michael gained the peace of mind that comes with always-on monitoring and incident response.

Improved Data Governance

Improved Data Governance 

All log data now resides within Churchill’s own tenant, ensuring full sovereignty and compliance.

Enhanced Security Posture

Enhanced Security Posture 

The financial mortgage firm now has a robust security posture management program in place to ensure continuous coverage.

Enhanced Visibility (Security)

Enhanced Visibility

With Microsoft-Native tools and custom dashboards, Churchill now has a complete view of their security landscape.

MSSP Time and Cost Savings

Time and Cost Savings 

Approximately 48% in cost-savings achieved through vendor consolidation, reduced tool maintenance, and infrastructure efficiencies. 

From Vendor to Strategic Partner

Bulletproof didn’t just provide a service—they became an integral part of Churchill Mortgage’s security team. What began as a technology engagement quickly evolved into a true strategic partnership.

Today, Michael is an active voice in Microsoft Security Trust Circles, sharing frontline insights and championing best practices—many shaped by his collaboration with Bulletproof. Beyond day-to-day support, Bulletproof also helped unlock valuable Microsoft funding programs, including ECIF and CSI, which accelerated implementation and eased the burden on Churchill’s internal resources.

It wasn't just onboarding - it was full enablement.

"Bulletproof isn’t just another Microsoft vendor—they’re true partners. Their team gives us personalized attention that bigger MSSPs can’t match. We work closely with their security experts, sharing ideas and using tools customized to our needs and the mortgage industry’s standards."

Michael Laudenslager, Churchill Mortgage
Michael Laudenslager
VP of Cybersecurity, Churchill Mortgage

The Conclusion

A Future-Proof Approach to Cybersecurity

With Managed Security Services, Bulletproof 365 Enterprise, Churchill Mortgage has future-proofed its security posture. The solution scales as their business grows, adapts to new threats, and supports continuous improvement through:

•    Continuous tuning of alerts and automation logic
•    Regular vulnerability scans and risk assessments
•    Ongoing collaboration with Microsoft Security advisors

As Churchill prepares for peak mortgage season and regulatory shifts, their security foundation is not only resilient—it’s optimized. The mortgage firm places a strong emphasis on cybersecurity, implementing rigorous protections to safeguard sensitive data, while prioritizing the best interests of their customers and stakeholders through every step of the home financing journey.

Bulletproof's Security Operations Center Expert.
Bulletproof Managed Security Case Study Image
Bulletproof Managed Security Case Study Image
Bulletproof Managed Security Case Study Image


Bulletproof Credentials

“I’m so pleased to congratulate Bulletproof this year’s Microsoft Security Excellence awards recipient for Security Trailblazer award.
 
Our partner community plays such an important role in helping our customers navigate a rapidly evolving cybersecurity landscape. 
 
We are so proud to work alongside them in a shared commitment to building a safer world for everyone.”  

Vasu Jakkal

Vasu Jakkal, CVP, Microsoft Security

Next Steps

SOC Video Image

Make Your Business Immune to Disruption with Our Security Operations Center

 

Did you know that there are 1.7 million ransomware attacks every day? That’s 19 every second! If that number doesn’t alarm you, consider this: the average cost of a ransomware attack is a staggering $1.85 million!

Watch this video for an exclusive inside look at how we keep your business secure with our Security Operations Center (SOC).

 

WATCH NOW

eBook: supercharge your security operations

Supercharge Your Security Operations

Enhance the efficiency of your Security Operations Center (SOC) by integrating cutting-edge threat intelligence that provides real-time insights into emerging threats and vulnerabilities.

This advanced intelligence enables your team to anticipate and respond to potential security breaches with precision and speed. Additionally, implement automated attack disruption technologies that swiftly neutralize sophisticated cyber threats, such as ransomware, before they can inflict damage. 

ACCESS EBOOK

Microsoft Modern SecOps Engagement

Microsoft Modern SecOps Envisioning Workshop

Gain a bird’s eye view across your enterprise with SIEM for a modern world.

Get an overview of Microsoft Sentinel along with insights on active threats to your Microsoft 365 cloud and on-premises environments with a Microsoft Modern SecOps Workshop.

LEARN MORE

Call Us

1.866.328.5538