Blink Security Automation — Confidential

BFI — Customer Success Report

Generated 2026-09-10 | bfi--value-report.md
2026-09-10Report Date
12Total Playbooks
7Unique Workflows (12m)
313,324Actions Automated (12m)
$80,587Money Saved (12m)
Last 12 MonthsData Period
CSM — Please review before sharing. AI-generated content may contain errors. Verify key metrics before sending to the customer.

01Business KPIs — Last 12 Months

12
Total playbooks built
all non-deleted workflows
6
Active playbooks
currently enabled
7
Unique workflows executed (12m)
distinct workflows that ran
313,324
Actions automated (12m)
completed action steps
1,740.7h
Hours saved (12m)
@ 20s per action
$80,587
Money saved (12m)
@ $100K avg salary
0
New active workflows (last 30d)
recently created & enabled
0
Total cases managed
0 opened in last 12m
N/A
MTTR — mean time to resolve
closed cases, last 12m
In the last 12 months, Blink automated: - 2,486 new security tickets instantly routed to the response team via Google Chat - 2,926 Zendesk ticket updates synchronized to Google Chat in real time - 2 Google Chat replies automatically captured back in Zendesk - 5,414 total automated ticket communications — eliminating manual copy-paste across platforms

02Use Cases & Playbook Distribution

Cumulative Playbooks Built — Last 90 Days

New Active Workflows Added — Last 30 Days

Use Case Summary
Use CaseKey Business KPIsShare of ActivityPlaybooks
Security Ticket ↔ Google Chat Sync (BFI)
  • 2,437Zendesk ticket updates synchronized to Google Chat
  • 2,056New security tickets routed to response team via Google Chat
  • 2Google Chat replies captured back in Zendesk
92.1%
3
3 active
Security Ticket ↔ Google Chat Sync (Curve)
  • 489Zendesk comment updates synchronized to Google Chat (Curve)
  • 430New Curve tickets routed to response team via Google Chat
7.9%
2
2 active
Inactive Playbooks0 executions
0.0%
1
1 active
Total20,840 executions100%
6
6 active

Use Case Growth Over Time

9 unique playbooks  |  3 operational use cases  |  20,840 total executions (12m)  |  2025-09 to 2026-02
Toggle:
Toggle:

03Integration Ecosystem

Security Ticket ↔ Google Chat Sync (BFI)
Google Chat Zendesk

04Key Observations

✓  Strengths

Strengths

  • High-volume, consistent automation: The core Zendesk ↔ Google Chat sync workflows are processing thousands of events per year (2,056 + 2,437 for BFI; 430 + 489 for Curve), indicating reliable, production-grade adoption.
  • Multi-team architecture: BFI has correctly separated workflows by business unit (BFI vs. Curve), allowing independent operation and channel hygiene without cross-team noise.
  • Bidirectional sync realized: The comment-to-Zendesk flow (Google Chat - New comment - To Zendesk) completes the feedback loop, though its low execution count (2) suggests it may be an early pilot or only used in specific scenarios.
  • Blink Tables used for state management: The Curve workflows use Blink's internal table system to track sync state, a sign of mature implementation avoiding duplicate notifications.

###

△  Gaps & Growth Opportunities

Gaps & Expansion Opportunities

  • No enrichment layer on incoming tickets: Tickets are forwarded to Google Chat as-is, with no automated enrichment (e.g., ticket priority, requester history, SLA status, or similar open tickets). Adding enrichment would reduce analyst triage time.
  • First Response playbook is a stub: The First Response workflow has never run and contains only a placeholder step. There is an opportunity to build out automated first-response SLA tracking, acknowledgment messages, or initial triage logic.
  • No closure/resolution loop: There is no automation to notify the Google Chat channel when a ticket is resolved or closed, leaving the team without a clear signal of case completion.
  • Google Chat → Zendesk channel is underutilized: Only 2 executions on the reverse flow suggests that analysts are not widely using Google Chat as an input channel back to Zendesk, or the workflow needs broader awareness/rollout.
  • Limited use case breadth: All current automation is concentrated in a single use case (ticket notifications). BFI has no coverage in vulnerability management, identity, cloud security, or broader SOC automation — significant whitespace for expansion.

Integration Ecosystem

Integration Role
Zendesk Source of truth for security tickets; webhook provider
Google Chat Real-time team collaboration channel; notification target
Blink Tables Internal state store for deduplication (Curve flows)
HTTP (generic) Used by Curve flows for Google Chat Cards API
Appendices
A Case Management

Case Management

No case management data found for this customer.

B AI Agents

AI Agents

No agent data found for this customer.

C Self-Service & Webforms

Self-Service Applications

No self-service usage data found for this customer.

Webforms

No webform usage data found for this customer.

D Full Use Case Analysis 3 use cases | 20,840 executions (12m)

Business KPIs

Metric Count Playbook
New security tickets routed to response team via Google Chat 2,056 Google chat New Ticket Created
New Curve tickets routed to response team via Google Chat 430 Curve - Google chat New Ticket Created
Zendesk ticket updates synchronized to Google Chat 2,437 Google chat - New comment from Zendesk
Zendesk comment updates synchronized to Google Chat (Curve) 489 Curve - Google chat - New comment from Zendesk
Google Chat replies captured back in Zendesk 2 Google Chat - New comment - To Zendesk
Total automated actions 5,414
In the last 12 months, Blink automated: - 2,486 new security tickets instantly routed to the response team via Google Chat - 2,926 Zendesk ticket updates synchronized to Google Chat in real time - 2 Google Chat replies automatically captured back in Zendesk - 5,414 total automated ticket communications — eliminating manual copy-paste across platforms

Use Case Summary

Use Case Category Playbooks Total Executions
Security Ticket ↔ Google Chat Sync (BFI) SOC 3 4,495
Security Ticket ↔ Google Chat Sync (Curve) SOC 2 919
Total 5 (+ 1 inactive) 5,414

Use Cases

1. Security Ticket ↔ Google Chat Sync (BFI)

Description: Bidirectional synchronization between the Zendesk ticketing system and Google Chat for BFI's tech security operations team. New tickets and comment updates flow automatically from Zendesk into a dedicated Google Chat space, and responses from Google Chat are pushed back into Zendesk.

Business problem solved: Security operations teams need to collaborate in real time on incoming tickets without manually switching between Zendesk and their chat workspace. This automation ensures the team is instantly notified of new tickets and can respond directly from Google Chat while keeping the audit trail in Zendesk.

Integrations: Zendesk, Google Chat

Playbook Executions (12 mo) Category Subcategory
Google chat New Ticket Created 2,056 SOC Case mgmt & SOAR
Google chat - New comment from Zendesk 2,437 SOC Case mgmt & SOAR
Google Chat - New comment - To Zendesk 2 SOC Case mgmt & SOAR

2. Security Ticket ↔ Google Chat Sync (Curve)

Description: A parallel implementation of the same bidirectional Zendesk ↔ Google Chat synchronization for the Curve workspace, using a custom Google Chat card format with interactive buttons. New Curve tickets and Zendesk comment updates are routed to a separate Google Chat channel, allowing the Curve team to operate independently.

Business problem solved: The Curve team requires its own ticketing notification channel with enriched, interactive messages (cards with buttons) rather than plain text. This automation provides the same real-time visibility as the BFI channel while giving the Curve team a tailored experience.

Integrations: Zendesk (webhook), Google Chat (HTTP/Cards API), Blink Tables (sync state)

Playbook Executions (12 mo) Category Subcategory
Curve - Google chat New Ticket Created 430 SOC Case mgmt & SOAR
Curve - Google chat - New comment from Zendesk 489 SOC Case mgmt & SOAR

Inactive Playbooks

Playbook Executions (12 mo) Notes
First Response 0 Stub/placeholder — contains only a Print step; not yet built out

Key Observations

Strengths

  • High-volume, consistent automation: The core Zendesk ↔ Google Chat sync workflows are processing thousands of events per year (2,056 + 2,437 for BFI; 430 + 489 for Curve), indicating reliable, production-grade adoption.
  • Multi-team architecture: BFI has correctly separated workflows by business unit (BFI vs. Curve), allowing independent operation and channel hygiene without cross-team noise.
  • Bidirectional sync realized: The comment-to-Zendesk flow (Google Chat - New comment - To Zendesk) completes the feedback loop, though its low execution count (2) suggests it may be an early pilot or only used in specific scenarios.
  • Blink Tables used for state management: The Curve workflows use Blink's internal table system to track sync state, a sign of mature implementation avoiding duplicate notifications.

Gaps & Expansion Opportunities

  • No enrichment layer on incoming tickets: Tickets are forwarded to Google Chat as-is, with no automated enrichment (e.g., ticket priority, requester history, SLA status, or similar open tickets). Adding enrichment would reduce analyst triage time.
  • First Response playbook is a stub: The First Response workflow has never run and contains only a placeholder step. There is an opportunity to build out automated first-response SLA tracking, acknowledgment messages, or initial triage logic.
  • No closure/resolution loop: There is no automation to notify the Google Chat channel when a ticket is resolved or closed, leaving the team without a clear signal of case completion.
  • Google Chat → Zendesk channel is underutilized: Only 2 executions on the reverse flow suggests that analysts are not widely using Google Chat as an input channel back to Zendesk, or the workflow needs broader awareness/rollout.
  • Limited use case breadth: All current automation is concentrated in a single use case (ticket notifications). BFI has no coverage in vulnerability management, identity, cloud security, or broader SOC automation — significant whitespace for expansion.

Integration Ecosystem

Integration Role
Zendesk Source of truth for security tickets; webhook provider
Google Chat Real-time team collaboration channel; notification target
Blink Tables Internal state store for deduplication (Curve flows)
HTTP (generic) Used by Curve flows for Google Chat Cards API
E New Integrations (detail) 0 added in last 30d

New Integrations Added - Last 30 Days

No new integrations found, or DB query was skipped.