Wyndham Hotels & Resorts turns intelligence into decisive security impact with Silobreaker

Overview.

As the world’s largest hotel franchisor, Wyndham operates across thousands of properties, spanning dozens of brands and regions. By automating manual workflows and standardizing outputs, the security team delivers timely, executive-ready intelligence while freeing analysts to focus on deeper research and proactive threat work that could impact its franchises.

Company information.

Wyndham Hotels & Resorts
8,000 to 10,000 hotel properties worldwide

Solution users.

Cyber threat intelligence analysts
Detection Engineering
Incident Response
Security Leadership

Industry.

Hospitality
  • Challenge.

    The highly distributed operating model and scale of individual properties introduce unique cyber risks. The Cyber Security Advanced Threat team sits at the center of the security program, supporting cyber threat intelligence, detection engineering, and incident response.

    Despite producing high-quality intelligence, the team faced growing pressure. Weekly reporting relied on static Word templates and manual copy-paste, consuming nearly a full week per cycle. These processes limited scalability, slowed dissemination, and made it difficult to consistently deliver the right insight to the right audiences.

    As leadership increasingly depended on intelligence to inform decisions, the team needed faster turnaround, clearer context, and a way to scale without compromising analytical rigor.

  • Solution.

    Silobreaker was deployed to modernize intelligence reporting and dissemination alongside existing CTI tooling. The platform allows the team to transform raw collection into consistent, finished intelligence products that could be shared efficiently across the organization. Through the use of Silobreaker’s AI capabilities, manual effort was reduced when it comes to summarization and draft content creation, all while preserving analyst judgment and control.

    With support from Silobreaker’s Customer Success team, the Advanced Threat team defined clear intelligence requirements aligned to business priorities, implemented curated collection workflows, and replaced manual reporting with standardized templates. Review and approval processes were streamlined, and intelligence distribution was tailored to security, IT, and business stakeholders.

Outcome.

The shift to automated, intelligence-driven reporting delivered measurable improvements:

  • 80–90% reduction in weekly reporting effort, cutting production time from nearly a full week to around half a day
  • More analyst time reinvested in deep analysis, threat actor research, and tailored intelligence
  • Greater consistency and coverage through standardized, repeatable reporting
  • Faster, more relevant intelligence with clearer context, impact, and recommended actions
  • Stronger stakeholder engagement and trust in the intelligence function

Intelligence generated through Silobreaker informs detection engineering and incident response, while operational experience feeds back into intelligence priorities. By reducing friction and focusing on what matters, Wyndham turns intelligence into outcomes that support real security decisions.

“Our security program is intelligence-driven, and reporting used to be a bottleneck. Silobreaker has transformed how quickly and consistently we can turn intelligence into something stakeholders can actually use. The time savings are significant, but more importantly, we’re now focused on the threats that truly matter to our business.”

—Michael Francess, Director, Cybersecurity Advanced Threat, Wyndham