
The challenge
A public technology agency for a Spanish regional government is responsible for centralizing and operating the IT and telecommunications infrastructure across dozens of departments and public bodies. It manages hundreds of thousands of endpoints supporting critical public services, including education, health, justice, citizen assistance channels, and emergency and security communications, all of which need to run 365 days a year.
Across the agency, dozens of departments and public bodies had grown into their own islands of technology. Each one had its own tools, its own EDR security setup, and no shared way to see what was actually happening across their devices. There was no single view of the fleet's health, security posture, or software footprint, which made it hard to manage risk, spot waste, or act with any real consistency across the organization.
The solution
Working with multiple technology partners, the agency deployed Flexxible to bring observability, inventory, control and security together in one console. IT teams could finally see every device, and every piece of software running on it, from a single place. By integrating with CrowdStrike directly inside the Flexxible console, IT and security teams could see vulnerabilities as they were identified and act on them immediately, replacing dozens of disconnected security setups with one consistent standard across the entire agency. The platform's built-in remote assistance module also let the agency retire a separate third-party tool they had been paying for and managing on top of everything else.
The results
Full visibility changed what the agency could act on. In the departments that adopted automated workflows and self-healing, annual incident time per person dropped 78%, and 19% of incidents are now prevented or resolved on their own, before a user notices or a technician even gets involved.
Security stopped being something each department handled alone. IT can now see vulnerabilities across the entire agency and close them before they turn into incidents, not after. That same visibility extended to software, and it surfaced something nobody had been tracking: 2.5 million euros a year in licenses the agency was paying for but not using.
The real impact goes beyond the numbers. Every incident resolved automatically, every vulnerability closed before it spreads, every license put back to work, is time and budget the agency can redirect to the services it exists to provide.


.avif)