Vestiaire Collective puts security first with Lacework and AWS

Lacework on AWS gives us a lot more visibility into our cloud security posture and provides actionable insights, so we are able to react quickly to threats and prioritize actions in our cloud strategy. I definitely wish we had implemented it sooner.
Aurélien Donneger, Head of Security, Vestiaire Collective
French retail company Vestiaire Collective is one of the world’s leading digital companies for pre-loved fashion, providing an alternative to the overproduction and overconsumption of the fashion industry.
Challenges
- Rapid organizational growth presented newfound security challenges
- Numerous disparate tools — with far too many interfaces and no automation — resulted in a lack of cross-environment visibility, rising costs, and increased time spent on investigation and remediation
- Lacked runtime host protection and the data needed to monitor and protect its containerized environment
- Manual compliance tasks prevented team from focusing on innovation
Solutions
- Deployed the Lacework Polygraph® Data Platform to monitor Amazon Web Services (AWS) activity with custom configuration policies and reporting
- Implemented Kubernetes runtime security, host-based intrusion detection system (HIDS), and file integrity monitoring (FIM)
- Consolidated tools and used automated compliance reporting
Results
- Faster investigations — from days to minutes — resulted in cost savings
- Saved time by eliminating manual compliance tasks and continuously monitoring configurations
- Cut alert volume from 200 per month to 50, freeing up time for small security and DevOps teams to focus on what matters most