August 2023 Summaries

In the first half of 2023, Veza launched over 50 new features and integrations for its Identity Security Platform, focusing on product usability enhancements and design improvements. Key updates include new integrations with various platforms such as Bitbucket, Jira Server, Box, ServiceNow, AWS Lambda, AWS Cognito, GitHub Enterprise, NetSuite, and more. Additionally, the platform introduced built-in insights for OAA integrations, Snowflake, AWS, Salesforce, and others, along with fully customizable reports and dashboards. Access Workflows were also enhanced with features like auto-assignment support for delegate reviewers and certifications that can be drafts or in-progress. The company plans to continue innovating and improving its product offerings throughout the year.

Capital One Ventures and ServiceNow Ventures have made a strategic investment in Veza, an identity security platform company. This new investment will help accelerate Veza's focus on building the modern identity platform and further validate its vision for transforming the identity industry beyond traditional SSO, MFA, IGA, and PAM approaches to secure identities. The added capital will support product development, innovation, and go-to-market capacity to meet market demand for Veza’s next-generation Identity Security solutions. Capital One Ventures and ServiceNow Ventures were chosen due to their strategic benefits, expertise in platform and market strategy, and understanding of the power of authorization and permissions data. Veza's Authorization Graph uses a Graph database approach to ingest and understand each system’s unique approach to authorization, transforming that information into easily digestible, standard language. With 100+ integrations already under their belt, Veza plans to grant customer requests for more integrations even faster with the new funding from Capital One and ServiceNow.

The principle of least privilege is a security architecture that grants each entity the minimum system resources and authorizations needed to perform its function. It aims to protect against compromised identities by limiting their permissions to key apps and data, reducing the "blast radius" from an attack. However, achieving least privilege in real-world scenarios is challenging due to scale, complexity, visibility, and productivity concerns. Many organizations struggle with privilege sprawl, which leads to technical debt or access debt. Manual access reviews are often ineffective at meaningfully reducing excess privileges. To effectively implement least privilege, organizations need identity-to-data visibility, effective access reviews, and privilege automation. Veza is an Identity Security platform that helps achieve least privilege by providing granular permission visibility, continuous monitoring for excess privileges, enabling intelligent access reviews, and offering out-of-the-box access intelligence to fix misconfigurations and apply best practices in role-based access control (RBAC).

The text introduces a journey through the history of hacks and data breaches, focusing on the techniques used by attackers and how organizations can protect themselves using Least Privilege as a defense strategy. It highlights orphaned or dormant accounts as an opportunity for hackers to exploit and emphasizes the importance of learning from past incidents to improve security measures.