Global Fiber Backbone, Edge Cloud and Network-Delivered Security Services

Lumen Technologies operates as a global communications and infrastructure provider, selling fiber connectivity, edge cloud, collaboration and cybersecurity services to enterprises, service providers and public sector organisations. The company took its current name in 2020, rebranding from CenturyLink, and is led by chief executive Kate Johnson. Its customer base spans retail, financial services, healthcare, manufacturing, energy, media and government, with security sold largely as an extension of the network itself rather than as standalone software.

Security is delivered from the network edge rather than from customer premises. Lumen Defender inspects inbound traffic on Dedicated Internet Access and Internet On-Demand circuits, automatically dropping connections from sources rated severe or high, with customer-managed allow, deny and monitor lists plus twelve months of reporting and no additional hardware. Around it sit tiered DDoS mitigation, SASE and SD-WAN for multisite deployment, managed SIEM, a virtual SOC and managed endpoint detection and response.

The differentiator is telemetry scale. Black Lotus Labs, the threat research and operations arm, analyses roughly 200 billion NetFlow sessions each day across the company's owned internet backbone and tracks approximately 46,000 command-and-control servers, feeding findings back into Defender and the DDoS products while publishing research publicly and disrupting malicious infrastructure. Visibility into transit traffic, rather than only into customer endpoints, is a vantage point software-only security vendors find difficult to replicate.