Polywall Powers the Security Operations Center at CASPEL

Before the project, CASPEL's SOC data lived in several separate consoles, and each analyst only saw what was open on their own screens. Each monitoring tool had its own console, and when something needed attention, the usual approach was to gather around one person's monitor or share a screen. There was no common picture of what was happening in the room.

The team wanted a shared view that users could switch quickly when priorities changed — one video wall that shows the state of monitoring at a glance, reduces screen sharing between analysts, speeds up reaction when something comes up, and gives team leads and management an easy way to follow an incident without interrupting the analysts working on it.

Running on standard hardware — without a proprietary controller — was an explicit requirement, so the SOC could size the workstation itself and keep the setup under its own control. The control room video wall software also had to run reliably in continuous operation without adding maintenance work for the team.

Two 98-inch 4K displays were mounted side by side in a 2×1 landscape configuration and connected to a dedicated controller workstation.

For the control room software, CASPEL chose Polywall PRO+. It could combine different types of sources on one wall and switch layouts in a few clicks, without requiring a proprietary hardware controller. Polywall runs on a standard Windows workstation, so the team can select their own hardware and size it for the SOC's needs. Quick and helpful support from the Polywall team also played a part in the decision.

The SOC's main dashboards and consoles were added to Polywall as sources, and the team built a set of layouts for different operational scenarios together with the analysts who use them daily: one for routine monitoring, one for incident handling, and views for briefings.

Today, CASPEL's SOC video wall supports day-to-day security monitoring — showing the alert queue and its status, key detection and infrastructure health dashboards, and summary views for management briefings. When an incident is being handled, the team switches the wall to a dedicated layout so analysts, team leads, and management all work from the same data.

With Polywall, CASPEL's SOC team gained the following capabilities:

• Smooth layout switching. Operators move between preconfigured layouts — routine monitoring, active incident, briefing — directly from the Polywall interface, adapting the wall to the situation in a few clicks.
• Single view for multi-source data. Dashboards from different monitoring systems appear on one wall, giving the team a single picture of the current alert queue, detection status, and infrastructure health.
• Access control. Only authorized SOC staff can change what is shown on the wall, keeping the display stable and under the team's control.
• Room to grow. The architecture supports additional displays and unlimited new sources as CASPEL introduces more monitoring tools or expands the SOC.

The project was implemented in-house by CASPEL's engineering team. The SOC manager and analysts decided which data should be on the wall and how the layouts should look. CASPEL's engineers selected the hardware, installed the displays and the controller, and set up Polywall with technical support from the Polywall team.