Case Study / Physical Security Software

Salient Systems

How TechProComp co-manages the network behind one of the industry’s leading video surveillance platforms - remediating vulnerabilities across the environment and engineering redundancy into every layer.
Zero

Unplanned downtime since redundancy projects completed

0%

Of identified network vulnerabilities remediated

Co-Managed

Partnership model - TechProComp alongside Salient’s internal team

Prepared by TechProComp Managed IT | Austin, Texas

Executive Summary

Salient Systems is an Austin-based software company and a recognized leader in video surveillance management. Founded in 1995, Salient builds CompleteView VMS and the PowerProtect appliance platform – technology that some of the most demanding organizations in the world rely on to run their physical security operations.

That position carries a particular obligation. A company whose product is security does not get to have a weak network. Salient’s customers evaluate the company itself, not just the software: how the vendor runs its own infrastructure, how it manages vulnerabilities, and whether its operations would survive an outage or an incident.

Salient had internal technical capability – but internal teams at a growing software company are consumed by the product. Network administration, vulnerability management, and infrastructure projects need dedicated, consistent ownership that does not compete with release deadlines.

TechProComp was engaged in a co-managed model: functioning as Salient’s outsourced network administration arm, working alongside the internal team across the entire network. The initial assessment surfaced a significant number of vulnerabilities and configuration mismatches accumulated across the environment. TechProComp systematically remediated them, then shifted the engagement to where it lives today: engineering redundancy and business continuity into every layer of the company’s infrastructure, so that no single failure – hardware, link, power, or site – can take Salient offline.

The result is an environment that matches what Salient’s own product promises its customers: resilient, monitored, and built to keep running.

At a Glance

Client

Salient Systems

Industry

Physical Security / Video Surveillance Software

Location

Austin, Texas

Engagement

Co-managed IT - outsourced network administration, vulnerability remediation, infrastructure projects, redundancy and business continuity engineering

Primary Goal

Bring the network to the standard a security company’s customers expect - then make it resilient enough that nothing takes it down

Outcome

Vulnerabilities remediated across the environment; redundancy and business continuity engineered into every layer of the network

When Your Product Is Security, So Is Your Network

Salient’s platform manages video surveillance for major enterprises, universities, and logistics operations. Customers who trust a vendor with their physical security infrastructure hold that vendor’s own operations to the same standard. The initial TechProComp assessment showed the gap between that standard and reality.

Accumulated Vulnerabilities

Network scanning surfaced a significant number of unpatched and exploitable weaknesses across the environment - the normal sediment of years of growth without dedicated network ownership.

Configuration Mismatches

Inconsistent configurations across network devices - mismatched settings, undocumented changes, and drift between what the network was designed to do and what it actually did.

Product Team Pulled Both Ways

Internal technical staff were absorbed by the product. Network administration competed with release deadlines - and release deadlines won.

Single Points of Failure

Critical paths through the infrastructure depended on individual devices, links, and services. Any one failure could interrupt operations across the company.

No Dedicated Network Ownership

No one’s full-time job was the health of the network itself - monitoring it, documenting it, and driving a remediation and improvement roadmap.

A Customer-Facing Standard

Enterprise customers evaluate their security vendors’ own security posture. The environment had to withstand that scrutiny, not just internal expectations.

Core Problem

A security company’s network had accumulated the vulnerabilities and configuration drift of years of product-first growth - and the internal team had no capacity to fix it without stopping work on the product itself.

Co-Managed, Not Outsourced Away

The model matters. Salient did not hand off IT and walk away - and TechProComp did not replace anyone.

In a co-managed engagement, TechProComp functions as the dedicated network administration arm of the client’s team: same standards, same documentation, same accountability - without the client hiring, training, and retaining that capability internally.

For Salient, that meant TechProComp took ownership of the network layer and infrastructure projects while the internal team stayed focused on the product and the systems closest to it. Work happens when it needs to happen - including after hours, so remediation and cutover work never interrupts business operations.

This is the arrangement Salient described in its own words in an independently verified review: TechProComp filling in as an outsourced network administrator, making the network more secure by finding and fixing important vulnerabilities, responsive and willing to work after hours.

The Mandate

Own the network: administration, monitoring, documentation, and change control
Find and remediate every vulnerability the assessment surfaced
Eliminate configuration drift and bring devices to a consistent, documented standard
Engineer redundancy into every critical layer - no single point of failure
Build business continuity across the company, not just the server room
Execute infrastructure projects without disrupting product work or business hours

From Vulnerable to Resilient

The engagement followed TechProComp’s standard methodology – full assessment and scanning first, then a prioritized project roadmap executed quarter by quarter and reviewed with leadership.

  1. 1

    Assess and Map

    Full network assessment and vulnerability scanning across the environment. Every device, link, and configuration documented. Findings ranked by risk and mapped into a remediation roadmap.

  2. 2

    Remediate

    Systematic elimination of identified vulnerabilities and configuration mismatches - patching, reconfiguration, standardization, and hardening, executed after hours where cutover risk existed.

  3. 3

    Stabilize and Own

    Ongoing network administration established: monitoring, documentation, change control, and a consistent configuration standard maintained across every device.

  4. 4

    Engineer Redundancy

    Project-by-project elimination of single points of failure - redundant paths, failover capability, and continuity design across the company’s infrastructure.

  5. 5

    Today - Continuity as Standard

    Every new project is designed for redundancy and business continuity by default. The network is treated the way Salient’s product treats its customers’ video: it cannot be allowed to stop.

Solution Delivered

Securing the Network

The first mandate was closing the gap the assessment exposed – every vulnerability, every mismatch, across the entire network.

01 / Vulnerability Remediation

Close every finding, in risk order

  • Full vulnerability scanning across the environment
  • Risk-ranked remediation roadmap
  • Patching and firmware standardization
  • Verification scanning to confirm closure

02 / Configuration Standardization

One documented standard, every device

  • Elimination of configuration mismatches and drift
  • Documented baseline for every network device
  • Change control so drift cannot recur
  • Hardened configurations across the stack

03 / Network Administration

Dedicated ownership, finally

  • Continuous monitoring of the environment
  • Full network documentation maintained
  • Proactive maintenance and lifecycle planning
  • After-hours execution to protect business hours

04 / Co-Managed Alignment

One team, two organizations

  • Internal team freed for product-critical systems
  • Shared visibility into all changes and projects
  • Escalation paths defined in both directions
  • Leadership reviews of roadmap and progress

The Standard

A vendor whose customers include some of the largest enterprises in the world is held to their bar, not its own. The network had to be defensible in a customer’s vendor security review – not just functional on a normal Tuesday.

Engineering for Continuity

With the environment secured, the engagement shifted to its defining theme: redundancy. Every project since has been designed around a single question – what happens when this fails?

01 / Redundant Infrastructure

No single point of failure

  • Redundant network paths and links
  • Failover capability for critical devices
  • Power and connectivity resilience
  • Elimination of single-device dependencies

02 / Business Continuity Design

The company keeps operating

  • Continuity requirements built into every project
  • Recovery priorities documented and agreed
  • Backup and restoration capability verified
  • Failure scenarios planned, not improvised

03 / Downtime Prevention

Interruptions engineered out

  • Proactive replacement before failure
  • Maintenance windows outside business hours
  • Monitoring that catches degradation early
  • Unplanned downtime avoided across the engagement

04 / Project Execution

Improvement without disruption

  • Infrastructure projects delivered across the company
  • Cutover work staged and rehearsed
  • Zero-interruption migration approach
  • Documentation updated with every change

Design Philosophy

Redundancy is not a project – it is a requirement applied to every project. Each piece of work at Salient is designed so that no single failure of hardware, link, power, or site can stop the business.

The Environment Their Customers Expect

In Their Words

“TechProComp’s service level and responsiveness are impressive.” Salient’s verified review credits TechProComp with making the network more secure by finding and fixing important vulnerabilities – with a team that is responsive, communicative, and willing to work after hours.

Source: verified client review, Clutch.co.

Vulnerabilities Closed

The weaknesses the initial assessment surfaced were systematically remediated – and verification scanning plus ongoing monitoring keep the environment at that standard.

Downtime Avoided

Redundancy engineering and proactive maintenance have kept the business running – interruptions are prevented in design rather than recovered from in crisis.

A Credible Security Posture

A security software vendor can now demonstrate an internal environment consistent with what its own product promises customers.

Product Team Protected

Salient’s internal capability stays pointed at CompleteView and its customers – while the network has a dedicated owner who treats it as the product it effectively is.

Engagement details are summarized for case-study purposes and must be reviewed and approved by the client before external publication.

Before TechProComp vs. After

Area Before TechProComp After TechProComp
Network Ownership No dedicated owner; administration competed with product deadlines and lost. TechProComp functions as the dedicated network administration arm in a co-managed model.
Vulnerabilities Significant accumulated vulnerabilities across the environment, unknown until scanned. Systematically remediated in risk order, with verification scanning and continuous monitoring.
Configuration Mismatched, undocumented configurations drifting across network devices. One documented baseline per device, enforced through change control.
Resilience Single points of failure in critical paths - one device or link could interrupt the company. Redundant paths and failover engineered layer by layer; no single failure stops the business.
Continuity Failure scenarios unplanned; recovery would have been improvised. Business continuity designed into every project, with recovery priorities documented.
Downtime Exposure to unplanned interruptions across the environment. Downtime avoided through proactive replacement, monitoring, and after-hours maintenance.
Internal Team Pulled between the product and the network, serving both poorly. Focused on the product and product-adjacent systems, with clear escalation to TechProComp.
Customer Scrutiny Internal environment inconsistent with the standard the product represents. A posture the company can stand behind in enterprise vendor security reviews.

Network Ownership

Before TechProComp
No dedicated owner; administration competed with product deadlines and lost.
After TechProComp
TechProComp functions as the dedicated network administration arm in a co-managed model.

Vulnerabilities

Before TechProComp
Significant accumulated vulnerabilities across the environment, unknown until scanned.
After TechProComp
Systematically remediated in risk order, with verification scanning and continuous monitoring.

Configuration

Before TechProComp
Mismatched, undocumented configurations drifting across network devices.
After TechProComp
One documented baseline per device, enforced through change control.

Resilience

Before TechProComp
Single points of failure in critical paths - one device or link could interrupt the company.
After TechProComp
Redundant paths and failover engineered layer by layer; no single failure stops the business.

Continuity

Before TechProComp
Failure scenarios unplanned; recovery would have been improvised.
After TechProComp
Business continuity designed into every project, with recovery priorities documented.

Downtime

Before TechProComp
Exposure to unplanned interruptions across the environment.
After TechProComp
Downtime avoided through proactive replacement, monitoring, and after-hours maintenance.

Internal Team

Before TechProComp
Pulled between the product and the network, serving both poorly.
After TechProComp
Focused on the product and product-adjacent systems, with clear escalation to TechProComp.

Customer Scrutiny

Before TechProComp
Internal environment inconsistent with the standard the product represents.
After TechProComp
A posture the company can stand behind in enterprise vendor security reviews.

What Salient Gained

A Dedicated Network Owner: Full-time-caliber network administration - monitoring, documentation, remediation, and projects - without hiring and retaining it internally.

A Defensible Posture: An environment that withstands the scrutiny enterprise customers apply to their security vendors.

Resilience by Design: Redundancy and continuity engineered into every layer, so no single failure can stop the business.

Focus Where It Pays: The internal team’s time flows to the product and its customers - the work only they can do.

What Comes Next

The engagement continues on the same principle it established: every new project – every expansion, every refresh, every migration – is designed for redundancy and business continuity by default. As Salient grows, the network grows with a standing rule already in place: the business does not stop.

The TechProComp Difference

A security company cannot outsource its standards – but it can extend its team. Salient kept its people on the product and gave the network a dedicated owner who found the vulnerabilities, fixed them, and then rebuilt the environment so it cannot be taken down by any single failure. That is co-managed IT done the way it should be: one standard, two teams, zero excuses.

Transformation Delivered

  • Co-managed network administration established
  • Full network assessment and vulnerability scanning completed
  • Complete network documentation built
  • Risk-ranked remediation roadmap executed
  • Identified vulnerabilities remediated across the environment
  • Configuration mismatches eliminated
  • Documented configuration baseline enforced
  • Change control established to prevent drift
  • Continuous network monitoring in place
  • After-hours execution protecting business operations
  • Redundant paths and failover engineered
  • Single points of failure systematically removed
  • Business continuity designed into every project
  • Proactive lifecycle and replacement planning
  • Unplanned downtime avoided across the engagement