Microsoft Exchange Server Exploit response
  • Network Security
  • Cloud Security
  • Security Operations
  • More
  • Get support
  • Sign In
  • Get Started

cuebiq

cuebiq in Other Industries
Download

At a Glance

Industry
Marketing and Advertising

Challenge
Security team sought automation and integration

Answer
Prisma Cloud reduces manual tasks and extends visibility

Results

  • Incorporates security in the CI/CD pipeline to discover and address flaws in containers before the issues go into production.
  • Integrates with existing SIEM, creating a central location for managing cloud native security events.
  • Shortens time to remediation, using a single pane of glass to get a broader picture rooted in context. Realtime monitoring and risk prioritization speed up discovery and remediation dramatically.
  • Reduces task load for security team by automating security controls, freeing them up to focus on higher priority tasks.

Intro
Cuebiq’s platform, Clara, uses location-based data to show how marketing activities influence consumer behavior. The company is at the forefront of industry privacy standards: Clara uses a future-proof privacy framework in its data collection and is one of the very first location providers to be certified by the Network Advertising Initiative (NAI), a leading privacy organization.

Cuebiq has a wealth of data that needs to be carefully protected, and new features are released regularly. Clara runs on Kubernetes®, and the team needed a dedicated tool to address container security.

Challenge
Security team sought automation and integration

Cuebiq’s security team is responsible for hardening, securing, and monitoring containers and Kubernetes. Together with Site Reliability Engineering (SRE), the team supports a DevOps organization of nearly 100 people.

The team needed a solution that could manage security risks with less manual effort, integrate with its existing security information and event management (SIEM) tool, and support the company’s advance toward DevSecOps.

Solution
Prisma Cloud reduces manual tasks and extends visibility

The security team uses Prisma™ Cloud as a primary tool in hardening the Kubernetes environment. Team members now run 10 scans per day to look for vulnerabilities, inspect traffic between containers, and block malicious requests.

Prisma Cloud allows the team to integrate security at every phase of development. With realtime monitoring, it’s easy to discover and address any vulnerability or flaw before it goes into production. This, in turn, is helping the entire company move toward a DevSecOps culture and ultimately stay secure.

The team also appreciates simplified compliance in scanning for misconfigurations. Because certain security controls can be automated, management and remediation are easier for a team with many other responsibilities.

Cuebiq integrated the platform directly with its existing SIEM, creating a central location for all security events—a fundamental requirement of the security vendor search.

Nicola Mutti, head of security for Cuebiq, says that Prisma Cloud provides “an incredible overall picture of everything developed in our environment. In a single pane of glass, we have everything under control.”

By adopting Prisma Cloud, Cuebiq shortened the overall time between vulnerability discovery and remediation. Mutti and his team can now perform near-realtime assessment and gain better understanding of what needs to be done to fix any issues.

Key Benefits
Prisma Cloud has helped Cuebiq in numerous ways, allowing the team to:

  • Incorporate security in the CI/CD pipeline so they can discover and address any flaws in their containers before the issues go into production.
  • Integrate with existing SIEM, creating a central location for managing cloud native security events.
  • Shorten time to remediation using a single pane of glass to get a broader picture rooted in context. Realtime monitoring and risk prioritization speed up discovery and remediation dramatically.
  • Reduce task load for security team by automating security controls, freeing them up to focus on higher priority tasks.

Conclusion

With Prisma Cloud, the Cuebiq engineering team can confidently identify and assess security vulnerabilities before putting code into production.

Mutti and the security team appreciate what Prisma Cloud has done for their current processes, and they’re thrilled they don’t have to manage multiple security tools anymore. In the near future, they also plan to assess the platform’s forensic capabilities, using Incident Explorer and the timeline view of security audits to help them enhance their internal capabilities.

To learn more about how Prisma Cloud can support your
security processes, visit paloaltonetworks.com/prisma/cloud.

cuebiq Mar 02, 2020 at 03:00 PM

Related Resources

White Paper

Simplify Zero Trust Implementation Using A Five-Step Methodology

Building Zero Trust networks is actually simpler than building legacy networks. This 5-step methodology makes deploying Zero Trust networks manageable, cost effective and non-disruptive.

Read

References and Case Studies

FNTS Case Study

Nebraska-based cloud hosting and managed services provider FNTS transformed its cloud hosting environment by adopting a hyperconverged, micro-segmented, and software-defined infrastructure. Traditional security approaches did not align with this new model, instead requiring an integrated suite of security capabilities that could extend seamlessly across private and public cloud environments. To address this need, FNTS deployed the Palo Alto Networks Security Operating Platform, taking advantage of the platform’s integration with VMware NSX® network virtualization to build a Zero Trust security infrastructure across its internal and client-facing network, physical and virtual endpoints, and public cloud environments. By centrally building, managing, and enforcing granular security policies, FNTS ensures that only specific, authorized traffic is permitted into, across, and out of its multi-cloud environments. The Palo Alto Networks platform also enables FNTS to accelerate investigation and remediation of incidents as well as automate protection across the network and endpoints, saving time and building client trust.

Read

Be the first to know.

As a member you’ll get exclusive invites to events, Unit 42 threat alerts and cybersecurity tips delivered to your inbox.

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement.
Subscription Reward

Popular Resources

  • Blog
  • Communities
  • Content Library
  • Cyberpedia
  • Event Center
  • Investors
  • Tech Docs
  • Unit 42
  • Sitemap

Legal Notices

  • Privacy
  • Trust Center
  • Terms of Use
  • Documents

Popular Links

  • About Us
  • Careers
  • Contact Us
  • Manage Email Preferences
Report a Vulnerability
  • USA (ENGLISH)
  • AUSTRALIA (ENGLISH)
  • BRAZIL (PORTUGUÉS)
  • CANADA (ENGLISH)
  • CHINA (简体中文)
  • FRANCE (FRANÇAIS)
  • GERMANY (DEUTSCH)
  • INDIA (ENGLISH)
  • ITALY (ITALIANO)
  • JAPAN (日本語)
  • KOREA (한국어)
  • LATIN AMERICA (ESPAÑOL)
  • MEXICO (ESPAÑOL)
  • SINGAPORE (ENGLISH)
  • SPAIN (ESPAÑOL)
  • TAIWAN (繁體中文)
  • UK (ENGLISH)
  • Facebook
  • Linkedin
  • Twitter
  • Youtube
Create an account or login

© 2021 Palo Alto Networks, Inc. All rights reserved.