From 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale

Summary

Lumen Technologies significantly expanded its asset inventory from 17,000 to 1.1 million devices using the Axonius platform. This improved exposure management, enabling faster zero-day responses and application-level risk assessment. The data-driven insights also influenced cloud migration decisions and increased security investment.

Key Takeaways

1. Lumen Technologies identified 1.1 million devices, a 60x increase from its initial 17,000 known assets, by reconciling data from over 40 disconnected systems using the Axonius asset intelligence platform.
2. Trusted asset data enabled Lumen to identify affected systems for zero-day vulnerabilities, confirm external exposure, and establish ownership within minutes, significantly improving response times.
3. The visibility gained from trusted asset data directly contributed to Lumen's decision to migrate the majority of its infrastructure to the cloud, reducing overall risk by 40%.

Statement Breakdown

• Claimed Facts: 50% of statements the article presents as facts
• Opinions: 30% of statements classified as editorial or subjective
• Claims: 20% of statements surfaced for additional reader evaluation

Credibility & Bias Reasoning

Credibility assessment: The article presents a case study with specific data points and quotes from a named individual. However, it heavily promotes a specific product (Axonius) without significant counterpoints, suggesting a promotional undertone. The claims are largely presented as factual within the context of the case study.

Bias assessment: Product-Centric Case Study. The article focuses exclusively on how Lumen Technologies improved its security posture using the Axonius platform. While it highlights real-world challenges and solutions, the narrative is framed to showcase the product's effectiveness, leading to a strong bias towards promoting Axonius.

Note: This article details a company's experience using a specific product. While informative, consider it a case study with a promotional angle rather than a neutral assessment.

Credibility flag: Promotional Case Study

Claimed Facts (6)

• This is presented as a statistical fact from a named report and survey.
• This describes the pre-existing state of Lumen's IT environment, presented as factual context.
• This is a specific numerical data point presented as the initial state.
• This is a specific numerical data point presented as an intermediate outcome.
• This is a specific numerical data point presented as the current state.
• This is a direct statement of impact and outcome attributed to the platform.

Opinions (6)

• This is a generalization about enterprise behavior, presented as a common assumption.
• This is a subjective interpretation of the data presented.
• This is a statement of consequence that, while likely true, is presented as a general principle rather than a directly proven fact in this context.
• This is an interpretive statement categorizing Lumen's situation.
• This describes a past situation, likely based on Krahn's account, but framed as a general problem statement.
• While presenting a statistic, the phrase 'despite broad agreement' introduces a subjective element about what *should* be prioritized.

Claims (7)

• This is a strong, potentially exaggerated statement of past difficulty, presented as a direct quote without independent verification of its frequency or severity.
• This is an emotional statement expressing surprise and realization, lacking objective measurement.
• This implies a direct causal link between quantification and funding, which, while plausible, is a subjective interpretation of leadership's decision-making process.
• The term 'near-instantaneous' is an imprecise and potentially hyperbolic description of speed.
• This is a highly informal and pejorative description of a past process, intended to evoke a negative reaction rather than provide a neutral analysis.
• This is a forward-looking statement that uses aspirational language ('intelligent risk-based requests,' 'most risk reduction') without concrete, measurable proof of future outcomes.
• This is a broad generalization and extrapolation from a specific case study to 'most enterprises,' which is not necessarily supported by evidence.

Key Sources

• The Hacker News — Media Outlet
• 2026 Axonius Actionability Report — Industry Report
• Lumen Technologies — Telecommunications Company
• Geoff Krahn — Director of Product and Platform Security at Lumen Technologies