How Lidl Spain Focuses on What Matters Most with XM Cyber

TL;DR

Lidl Spain, the country’s third-largest grocery chain with more than 700 supermarkets and 13 logistics hubs, faced a flood of vulnerability data and no way to separate real risk from noise. XM Cyber deployed without disruption, uncovered misconfigurations that no other tool had flagged, and helped a small security team zero in on the exposures that matter most.

“The real challenge was knowing which vulnerabilities and exposures matter most – and that’s where XM Cyber helps.”

Josep Mulero, Information Security Officer, Lidl Spain

The Challenge

For Josep Mulero, Information Security Officer at Lidl Spain, the challenge was clear: traditional tools generated a flood of data, but not the clarity his team needed to act efficiently. “We used vulnerability scanners, and they always produced a long list of issues,” Josep said. “Even if you stay on top of it, new ones keep coming. The real challenge was knowing which vulnerabilities and exposures matter most – and that’s where XM Cyber helps”

With a small team that needs to balance security with many other responsibilities, efficiency is critical at Lidl Spain. “In information security, there’s always more to do,” he explained. “You’re not just fixing vulnerabilities – you’re handling certifications and many other tasks. You don’t have time for everything, so optimizing the time you spend is essential.”

The Solution

XM Cyber’s exposure-driven approach gives Lidl a way to focus on the risks that can truly impact the business. Josep Mulero mentions;

“What I like about XM Cyber is its virtual twin of our environment. It doesn’t analyze the production environment directly, which gives us peace of mind because we can’t afford to risk disrupting our systems or sales.”

Josep Mulero, Information Security Officer, Lidl Spain

The deployment was fast and frictionless. “The process was smooth. We rolled it out across all devices quickly and without any trouble, which really surprised us,” said Josep.

From the start, the platform delivered clear value. “We found misconfigurations that other tools had never shown us,” he said. “They were easy to fix, and solving them gave us confidence that we were addressing real issues we didn’t even know existed.”

Benefits & Outcomes

XM Cyber has transformed how Lidl Spain prioritizes and addresses security risks. The deployment was smooth and fast, the interface is intuitive, and the support team knows the product inside out. Josep also praised the relationship with XM Cyber's partner program: "The relationship is excellent - they almost feel like part of our team."

• Sharper focus on real risk: "XM Cyber helps us focus on what matters. We spend our time on the issues that truly protect the company."
• Actionable findings: "We discovered misconfigurations we never saw with other solutions, and fixing them made us feel more secure."
• Expert support and usability: "The interface is intuitive. After just a few instructions, you can get to what you need quickly and easily." And when help is needed: "The support team knows the product inside out. Whenever we need help, they always have a solution."

Key Takeaways

“I absolutely recommend XM Cyber. It helps you focus on the right vulnerabilities and even uncovers misconfigurations that other tools miss.”

Josep Mulero, Information Security Officer, Lidl Spain

• Traditional scanners overloaded the team with vulnerability data and provided no way to identify which issues threatened critical assets.
• Traditional scanners overloaded the team with vulnerability data and provided no way to identify which issues threatened critical assets.
• XM Cyber surfaced hidden infrastructure and exposures that the scanners missed - including misconfigurations that survived patching. 
• Attack path visualization and choke point identification gave the team a new way to think about risk, and the security score improved steadily as the team fixed the choke points XM Cyber identified. 
• Quarterly score reviews with top management made progress visible and changed how leadership views vulnerability management.