A second brand is a separate commercial identity used by a parent company to reach a different customer segment, often with different pricing, features, or support rules. In telecom, for example, a parent operator may run a low-cost brand alongside its premium brand while sharing the same core infrastructure behind the scenes.
In cyber security, second brands matter because they can expand the attack surface around trust and identity. Attackers may imitate the cheaper brand in phishing, fake support sites, or fraudulent SIM and account-recovery flows because customers expect simpler onboarding and lower-friction service. Defenders also have to track multiple domains, apps, help desks, and provisioning paths, which can complicate asset inventory, access control, and incident response. A second brand is not a separate security boundary by itself; it is a business layer that still needs the same governance as the parent company.