--- title: Customers url: https://infrastack.ai/customers --- # Teams that stopped reading every advisory How companies without a dedicated security team use InfraStack to know which new threats are theirs. In their words, with their sign-off. ## Outplane: How Outplane checks every new threat against its stack, without a security team Outplane is a cloud platform where teams run their apps, databases and coding agents. With InfraStack, the five-person team now knows early when a threat affects its partners, its own stack or its customers' apps, including the threats that never make the news. Page: https://infrastack.ai/customers/outplane At a glance: - Company: Outplane (outplane.com) - What they do: A cloud platform where teams deploy their apps and managed PostgreSQL, plus Hangars, Outplane's cloud machines built for coding agents - Customers: Startups and companies, most of them in Europe - Team: 5 people, no dedicated security team - Stack: Kubernetes, .NET, React, Go, npm, Claude Code and Codex - Using InfraStack: 3 months Results: - 19,700+ new threats checked against their stack - 5+ hours of manual work saved every week - < 5 minutes to set up - 1,882 exploited in the wild - 3,843 critical - 1,536 malicious packages - 685 aimed at AI agents and coding tools - 112 breach and attack campaigns ### The challenge: the threats that don't make the news Outplane runs other people's code. Customers deploy their apps on the platform, and their coding agents work inside Outplane's Hangars. The platform also depends on partners and on popular frameworks like .NET and React. So a problem in any of these is not only Outplane's problem. It can quickly become a customer's problem too. New CVEs, malicious packages and attacks on AI tools come out every week. The team always followed the big ones. But many threats never become big news, and some appear weeks before a CVE exists. For a five-person team, finding these by hand every week is not realistic. ### Why InfraStack Outplane didn't need another dashboard or more alerts. It needed someone to watch the news and answer one simple question: does this new threat affect us, yes or no? InfraStack gives this answer and shows the evidence behind it. It is read-only and it needs nothing on Outplane's servers, so it was an easy decision. ### Getting started in less than 5 minutes The setup took less than 5 minutes. Now all findings come to the team's Slack. There is no new tool to open. When InfraStack needs more information, it asks a question in Slack. ### What InfraStack found In 3 months, InfraStack checked more than 19,700 new threats against the Outplane stack as they came in: 1,882 exploited in the wild, 3,843 critical, 1,536 malicious packages and 112 breach and attack campaigns, and judged the ones that matched. The findings came from three places. Partners: security issues in the services and vendors Outplane works with. Outplane's own stack: vulnerabilities in .NET and React, the frameworks behind the Outplane API and console. Customers: threats in the software that customers run on Outplane. ### The results Visibility: more than 19,700 new threats checked against the stack in 3 months, including early warnings that were not big news yet. Time: doing the same work by hand would take more than 5 hours every week. Today it takes a few minutes in Slack. Coverage: a five-person team now covers partners, its own stack and its customers' apps, without a security engineer. > "We always followed the big security news. But many threats never become big news, or they appear weeks before a CVE. InfraStack finds these for us and tells us if they matter." > > Founder & CTO, Outplane > "InfraStack doesn't send me more alerts. It tells me which ones are about us. For a team that runs other people's code, this is the most important thing." > > Founder & CTO, Outplane ### What's next Next, Outplane wants to use InfraStack for the infrastructure layer between the platform and its customers, so threats in this shared layer are checked too. [Check my stack free](https://infrastack.ai/signup).