Vestiaire Collective puts security first with Lacework and AWS

Lacework on AWS gives us a lot more visibility into our cloud security posture and provides actionable insights, so we are able to react quickly to threats and prioritize actions in our cloud strategy. I definitely wish we had implemented it sooner.

Aurélien Donneger, Head of Security, Vestiaire Collective

French retail company Vestiaire Collective is one of the world’s leading digital companies for pre-loved fashion, providing an alternative to the overproduction and overconsumption of the fashion industry.

Challenges

  • Rapid organizational growth presented newfound security challenges
  • Numerous disparate tools — with far too many interfaces and no automation — resulted in a lack of cross-environment visibility, rising costs, and increased time spent on investigation and remediation
  • Lacked runtime host protection and the data needed to monitor and protect its containerized environment
  • Manual compliance tasks prevented team from focusing on innovation

Solutions

  • Deployed the Lacework Polygraph® Data Platform to monitor Amazon Web Services (AWS) activity with custom configuration policies and reporting
  • Implemented Kubernetes runtime security, host-based intrusion detection system (HIDS), and file integrity monitoring (FIM)
  • Consolidated tools and used automated compliance reporting

Results

  • Faster investigations — from days to minutes — resulted in cost savings
  • Saved time by eliminating manual compliance tasks and continuously monitoring configurations
  • Cut alert volume from 200 per month to 50, freeing up time for small security and DevOps teams to focus on what matters most