How Afresh automated access escalations, improving security and developer experience
Blog post from P0 Security
Afresh, a technology company based in San Francisco, develops an AI-powered platform to reduce grocery store produce waste and serves major U.S. grocery chains. To address security and operational challenges related to access control and compliance with certifications like SOC2, Afresh partnered with P0. Previously, they struggled with overprovisioned access and complex permission management across various systems like Azure, Snowflake, and Kubernetes, which impacted both security and developer productivity. The integration with P0 streamlined their process by automating just-in-time access, remediating permission drift, and improving the developer experience with features like Slackbot for access requests and PagerDuty for on-call automation. The outcome was a significant enhancement in Afresh's security posture, as well as a reduction in mean-time-to-resolution for access requests from hours to minutes, making the platform more efficient and user-friendly.