Case Study
Blend

Blend is a leader in the fintech industry, with many of the largest financial providers using Blend’s cloud-based banking platform to streamline workflows such as mortgage applications. As such, the company needed to protect its banking partners’ customer PII stored on their Amazon Workspaces architecture, including Social Security numbers, income records, and more across email, web browsers, and removable media for their Windows-based endpoints.

Unfortunately, Blend’s existing Data Loss Prevention (DLP) solution lacked the ability to protect data loss at the endpoint, and didn’t have API access - critical to its infrastructure as code approach - leading them to look for a replacement.

To address these concerns, Blend turned to Endpoint Protector Unify by CoSoSys - the industry’s only API-first, endpoint DLP solution. They embarked on a comprehensive implementation strategy, which involved setting up policies to improve insight into user actions, oversee data movements, and identify particular keywords and confidential information.

Leveraging the platform’s Content Aware Protection functionality to inspect and contextually scan data for sensitive PII, Blend is able to monitor for confidential information and oversee data movement, thus significantly enhancing their data protection measures.

With the API-driven architecture of Unify, Blend can now automate infrastructure as code, facilitating seamless integration of DLP policy changes through a streamlined process of creating pull requests on GitHub. This sophisticated automation ensures that approved code modifications are efficiently pushed to Endpoint Protector Unify, establishing a robust audit trail for enhanced accountability. Additionally, the introduction of an API into the Unify platform allows them to verify the presence of security agents across all anticipated devices, bolstering confidence and assurance for their customers.

By embracing automation, enhancing visibility, and exerting control over security configurations and policies, this solution empowers Blend’s security operations team to maintain a resilient security posture, particularly in the intricate and dynamic landscape of AWS. The platform not only fosters transparency but also reinforces accountability in the management of security-related changes, contributing to a more secure and well-governed IT environment.

• Data and file transfer monitoring and remediation
• Flexibility and detailed control over content movement
• Fast and easy implementation process
• Detailed monitoring and reporting
• API-driven to support automation initiatives