← All case studies
Case Study · Engineering consultancy

CapaOne & NIRAS:
Makes Patching Easy and Transparent

A Global Engineering Consultancy with Thousands of Devices.

Engineering consultancyIndustry
3,000+Devices managed
60+Locations
100,000+CVEs tracked

I’m not exaggerating when I say security has improved significantly. The complexity in CapaOne is low, it’s transparent, and we don’t need to navigate countless submenus to gain an overview and address security gaps across our 60+ locations worldwide.

Søren Dahl NielsenSystem Deployment Manager

NIRAS is one of Denmark’s largest consulting engineering companies, employing more than 3,000 people across 60+ locations worldwide.

The organization works in construction, sustainability, infrastructure, environment, and energy, and depends on a wide application and hardware landscape to support its global workforce.

The IT department manages more than 3,000 devices and must maintain security, visibility, and consistent patching across all endpoints.

Business Challenge

Keeping Thousands of Devices Updated and Secure

Updating software across 3,000+ devices was resource-intensive.

Many applications required frequent security updates, while other software needed custom configurations that NIRAS preferred to handle internally.

Balancing automated patching with manual packaging — without unnecessary complexity — was a key requirement.

The IT team also needed better visibility and a simple way to identify vulnerabilities across their international environment.

The Solution

On-Premise CapaInstaller Combined With CapaOne Cloud Products

NIRAS uses the on-premise, CapaInstaller, from CapaSystems together with several CapaOne cloud services to streamline patching and strengthen security across a global device environment.

Workflows enable automated patching where it makes sense, while still allowing the IT team to manage and package custom-configured applications internally.

Today, several CapaOne services play a central role in daily operations:

  • CapaOne Application Manager automates patching of third-party software that requires continuous security updates, while supporting custom application packaging
  • CapaOne Security Monitor provides clear visibility into vulnerabilities, supported by a risk score based on more than 100,000 CVEs to help prioritize the most critical issues
  • Endpoint inventory gives Support detailed insight into hardware, software, and drivers, improving day-to-day troubleshooting and visibility

The Outcome

Stronger Security and Better Visibility Across 60+ Locations

Security has improved significantly thanks to automated patching and clearer insight into vulnerabilities.
The transparent interface reduces complexity and helps the IT department avoid navigating multiple submenus when assessing risks.

Support now works more efficiently due to improved visibility from the endpoint inventory.

With a flexible setup, NIRAS can scale and adapt its security processes as the organization evolves.

The Highlights

Key Improvements Experienced by NIRAS

  • Automated patching for frequently updated applications
  • Flexibility to manage and package custom software internally
  • Significant improvement in overall security
  • Clear and transparent risk scoring using 100,000+ CVEs
  • Lower complexity and easier prioritization of issues
  • Improved visibility for both IT and Support teams
  • Scalable workflows that support a global environment
FAQ

Questions we get asked

Anything else? Talk to our team →

How Do You Keep Devices Secure Across Offices in Different Countries?

NIRAS applies the same workflows to more than 3,000 devices spread across 60+ locations worldwide. Application Manager updates the applications that need continuous security fixes, so a device in one country meets the same standard as a device in another.

How Do You Prioritize Which Vulnerabilities to Fix First?

Security Monitor gives NIRAS a risk score built on more than 100,000 CVEs. The score points the IT department toward the most critical issues first, rather than leaving them to assess a flat list of findings.

Can You Automate Patching and Still Package Applications Yourself?

NIRAS does both. Workflows handle the applications that need frequent security updates, and the IT team retains full control over software that requires custom configuration.

How Do You See What Hardware and Software a Device Actually Has?

NIRAS gives Support detailed insight into hardware, software, and drivers on each device. Knowing what sits on the machine before troubleshooting starts shortens the daily work across more than 60 locations.

Want results like this on your estate?

See CapaOne on your own devices — standalone or alongside Intune. Most teams are up and running in under 30 minutes.