

Stagecoach's services underpin daily life for the communities it serves, buses that have to run, be on time, and stay resilient. As Julie puts it, what's being protected is more than an organisation, it's trust, continuity, and the journeys communities depend on.
The requirement went beyond visibility or a strong detection strategy alone. Stagecoach needed an MDR solution able to keep pace with the speed and sophistication of modern attacks while continuing to strengthen its security posture. The core challenge for the security team wasn't a lack of information, it was the volume of it: distinguishing what's important and urgent from what's simply noise, and knowing what action to take next.
Splunk gives Stagecoach confidence that alerts are surfaced based on the risks that actually matter to the business, and combined with Smarttech247's expertise, Stagecoach has access to rich analytics as a key layer of defence. Smarttech247's MDR combines advanced detection, automation and threat intelligence with real human expertise, so Stagecoach isn't just receiving alerts, it's getting help understanding risk, prioritising action, and strengthening its security programme in a measurable way.
For Julie, the human element is what makes this work day to day:
"When something is important, I need to know I can pick up the phone and speak to somebody who really understands our environment, the pressure, and what's at stake. That's incredibly important."
Splunk brings specific experience operating in Critical National Infrastructure (CNI) environments to the partnership, noting that any serious compromise could seriously affect the delivery of services the public depends on, which is why speed of response matters as much as detection itself.
Capabilities like risk-based analytics, user and entity behaviour analysis, and agentic AI help ensure high-priority threats are surfaced quickly with relevant context, which Smarttech247 depends on to provide a strong response and assurance back to Stagecoach. For Stagecoach, the strategic focus has always been operational continuity: reducing risk, improving visibility, and responding faster, which the partnership is built around delivering.
"Cybersecurity is not about saying nothing will ever happen. It's about being prepared, being able to respond, and being able to keep the organisation moving. For Stagecoach that is vital because our services matter to people. They matter to communities, and they matter every single day."
Stagecoach Group is the UK's largest bus and coach operator, headquartered in Perth, Scotland, and founded in 1980 by Brian Souter and Ann Gloag. The company connects over 100 towns and cities across England, Scotland, and Wales, running a fleet of around 8,300 to 8,400 buses and coaches, and employs roughly 24,000 to 25,500 people. Stagecoach was acquired by a consortium including DWS Group in 2022, transitioning to private ownership under CEO Claire Miles. The group has invested heavily in fleet electrification, with over 11% of its fleet now zero-emission, and holds an "A-" CDP Climate Change rating, placing it in the top 1% of companies globally in the Road Transport sector for climate leadership.