Rapid7 > Case Studies > Rapid7 Enables Qlik's Expanding Multi-Cloud Security and Compliance Strategy

Rapid7 Enables Qlik's Expanding Multi-Cloud Security and Compliance Strategy

Technology Category

Cybersecurity & Privacy - Application Security
Cybersecurity & Privacy - Cloud Security

Applicable Industries

Equipment & Machinery
National Security & Defense

Applicable Functions

Sales & Marketing

Use Cases

Leakage & Flood Monitoring
Tamper Detection

Services

Cloud Planning, Design & Implementation Services
System Integration

The Customer

Qlik®

About The Customer

Qlik is a leading data integration and analytics platform that helps customers turn raw data into remarkable outcomes. Founded in 1993, Qlik has grown both independently and through mergers and acquisitions into an enterprise with over 2,000 employees delivering two main platforms, Qlik Data Integration and Qlik Data Analytics. Qlik's products are used by customers to accelerate business value by closing the gaps between data, insights, and action. The company is expanding its cloud footprint and is a growing Software as a Service (SaaS) technology provider, using cloud providers like Azure and Google Cloud Platform.

The Challenge

Qlik, a leading data integration and analytics platform, was facing the challenge of expanding their cloud footprint while ensuring a cohesive, enterprise-level cloud security strategy. The company, which has grown significantly since its inception in 1993, was already using cloud services across various departments, including Research and Development (R&D) and Security teams. However, they recognized the need for holistic guidance to ensure the adequate protection of their cloud resources and data. As Qlik continued to grow as a Software as a Service (SaaS) technology provider, the use of cloud providers like Azure and Google Cloud Platform also expanded. The challenge was to maintain consistent control of their cloud environments and expand their cloud security best practices into these new environments.

The Solution

To address their challenge, Qlik selected the Rapid7 InsightCloudSec platform. They brought onboard a Cloud Architect to expand their Cloud team with the initial goal of securing their existing cloud environments, which consisted mostly of AWS accounts. The InsightCloudSec team worked closely with the Qlik Cloud team to integrate their AWS, GCP, and Azure accounts. The platform provided unified visibility and monitoring, automation and real-time remediation, and extensibility. Qlik was able to empower their employees across relevant business units to have self-service access to the cloud, safely. The Qlik Sales team worked with the Qlik Cloud team to set up scenarios of typical working environments for demonstrations in the cloud. With InsightCloudSec, Qlik was able to deploy scenarios in approximately 15 minutes, ensuring secure access and tracking of traffic.

Operational Impact

The implementation of InsightCloudSec has not only provided significant cost savings but also empowered Qlik employees to innovate and sell. The platform integrated into and enhanced their standard business processes. For instance, when an employee violates a specific policy, an InsightCloudSec Bot sends notifications to the appropriate people via email and Microsoft Teams, informing them of the violation. This has resulted in a higher rate of employee-initiated remediation to fix the issues. InsightCloudSec also provided contextual information about their cloud environment, helping Qlik differentiate the risk level of different cloud storage tools. This has changed the conversations that the Cloud team was having with the Security team, leading to better decision-making.

Quantitative Benefit

Qlik was able to deploy complex sales demo scenarios in approximately 15 minutes, down from 2-3 days.
Qlik saw an immediate reduction in costs of about $10-15K in one month by assigning appropriate startup and shutdown time tags to their virtual machines (VMs).
Qlik has seen a 60% reduction in their cloud costs by applying startup and shutdown times to all subscriptions, accounts, and projects across Azure, AWS, and GCP.