Zip Co Limited Enhances Cloud Security and Visibility

In addition to slowing Zip’s growth, their security tools required valuable IT resources to maintain. These limitations meant that:

• The overall technology environment was siloed, with Zip comprised of five different companies with varying infrastructure
• Internal applications were exposed to the internet, a necessity to ensure global access but with increased risk
• Previous solutions routed all traffic through the US, diminishing the end user experience
• Securing new Amazon Web Service (AWS) and Microsoft Azure instances added during company acquisitions was a time-consuming process

Next, Zip implemented Netskope Private Access (NPA) as a ZTNA solution to secure access to both on-premises applications and applications running in AWS and Azure. This solution simplified and standardized the onboarding of employees and resources from new acquisitions and centralized all access controls.

Maintaining compliance in the cloud was also a priority, so Zip chose Netskope Public Cloud Security to monitor their multiple AWS and Azure deployments for misconfigurations and vulnerabilities. Netskope Public Cloud Security helps Zip to ensure compliance with their public cloud infrastructure best practices and standards.

Zip also uses Netskope Cloud Exchange to consume and distribute information to help improve situational context and threat remediation. Zip uses Cloud Exchange to share information on potential IOCs and ingest event streaming logs into their Sumo Logic SIEM. A container-based solution that Zip runs on AWS Fargate, Cloud Exchange provides powerful integration tools that help to improve security posture and reduce TCO. Cloud Exchange can ingest and share information with services such as AWS CloudTrail and Amazon GuardDuty.

Zip was able to fully integrate Netskope Public Cloud Security with their Amazon and Azure environments. Since they have multiple cloud accounts, keeping track was often a complicated endeavor. Today, they enjoy excellent visibility into their security groups, ACLs, and databases from a central console. “Being able to see all these environments in one place gives me a lot of insight into the maturity of those environments and where I need to focus my efforts to keep the organization secure,” said Peter.

Netskope enabled Zip to replace disparate security tools with one best of breed platform. This provided more comprehensive enforcement with standardized policies applied across all users, apps, and devices. This also provided them with visibility and control to enable their employees to work from home—an invaluable benefit when Zip’s offices closed due to COVID. “We were able to grow and thrive during COVID—we haven’t skipped a beat,” said Peter.