“The first sweep found a global admin who had left the company seven months earlier. That one finding paid for the year.”
SOC 2 Type II · ISO 27001 · 1,400 security teams
SOC 2 Type II · ISO 27001 · 1,400 security teams
Palisade
Palisade
Risk score82/100open
Next page/
Home
Customers
Closed cases, in their own numbers.
Four teams, four different problems. Each started with a sweep and a list they did not expect.
SOC 2 Type II · ISO 27001 · 1,400 security teams

- 1Calder Staffing340 orphaned accounts closed
- 2Harbour & Vale4 minutes to contained
- 3Lumen PayClean SOC 2 in 11 weeks
Customers
Closed cases, in their own numbers.
Four teams, four different problems. Each started with a sweep and a list they did not expect.
SOC 2 Type II · ISO 27001 · 1,400 security teams

- 1340 orphaned accounts closed. Calder Staffing
- 24 minutes to contained. Harbour & Vale
- 3Clean SOC 2 in 11 weeks. Lumen Pay
- 1340 orphaned accounts closedCalder Staffing
- 24 minutes to containedHarbour & Vale
- 3Clean SOC 2 in 11 weeksLumen Pay
Customers
Closed cases, in their own numbers.
Four teams, four different problems. Each started with a sweep and a list they did not expect.
SOC 2 Type II · ISO 27001 · 1,400 security teams

- 1Calder Staffing340 orphaned accounts closed
- 2Harbour & Vale4 minutes to contained
- 3Lumen PayClean SOC 2 in 11 weeks
4 of 4 cases
Closed340orphaned accounts closed in week oneCase 01 · Staffing · 1,150 seats
Calder Staffing
We found 340 accounts that belonged to nobody.
Imogen Hartley · Head of IT
- 340orphaned accounts closed in week one
- 22admin accounts removed
- 0leaver accounts open after 24 hours
- Identity
- Respond
Closed3days from patch release to installedCase 02 · Logistics · 2,400 seats
Northwind Freight
Patch lag went from 41 days to three.
Darius Okafor · Infrastructure Lead
- 3days from patch release to installed
- 180unknown devices found
- 97%devices encrypted, up from 71%
- Endpoint
Closed4minutes from alert to containedCase 03 · Hospitality · 860 seats
Harbour & Vale
An open port, closed before breakfast.
Sofia Marchetti · Group IT Director
- 4minutes from alert to contained
- 6days the first incident ran, before Palisade
- 34hotels on one timeline
- Respond
- Identity
Closed11weeks to a clean SOC 2 Type II reportCase 04 · Fintech · 210 seats
Lumen Pay
SOC 2 in eleven weeks, with a team of two.
Tomás Reyes · CTO
- 11weeks to a clean SOC 2 Type II report
- 86controls mapped to live checks
- 4days of team time for the second audit
- Identity
- Endpoint
- Cloud
Sample customers, demo data
4 of 4 cases
Closed340orphaned accounts closed in week oneCase 01 · Staffing · 1,150 seats
Calder Staffing
We found 340 accounts that belonged to nobody.
Imogen Hartley · Head of IT
- 340orphaned accounts closed in week one
- 22admin accounts removed
- 0leaver accounts open after 24 hours
- Identity
- Respond
Closed3days from patch release to installedCase 02 · Logistics · 2,400 seats
Northwind Freight
Patch lag went from 41 days to three.
Darius Okafor · Infrastructure Lead
- 3days from patch release to installed
- 180unknown devices found
- 97%devices encrypted, up from 71%
- Endpoint
Closed4minutes from alert to containedCase 03 · Hospitality · 860 seats
Harbour & Vale
An open port, closed before breakfast.
Sofia Marchetti · Group IT Director
- 4minutes from alert to contained
- 6days the first incident ran, before Palisade
- 34hotels on one timeline
- Respond
- Identity
Closed11weeks to a clean SOC 2 Type II reportCase 04 · Fintech · 210 seats
Lumen Pay
SOC 2 in eleven weeks, with a team of two.
Tomás Reyes · CTO
- 11weeks to a clean SOC 2 Type II report
- 86controls mapped to live checks
- 4days of team time for the second audit
- Identity
- Endpoint
- Cloud
Sample customers, demo data
4 of 4 cases
Closed340orphaned accounts closed in week oneCase 01 · Staffing · 1,150 seats
Calder Staffing
We found 340 accounts that belonged to nobody.
Imogen Hartley · Head of IT
- 340orphaned accounts closed in week one
- 22admin accounts removed
- 0leaver accounts open after 24 hours
- Identity
- Respond
Closed3days from patch release to installedCase 02 · Logistics · 2,400 seats
Northwind Freight
Patch lag went from 41 days to three.
Darius Okafor · Infrastructure Lead
- 3days from patch release to installed
- 180unknown devices found
- 97%devices encrypted, up from 71%
- Endpoint
Closed4minutes from alert to containedCase 03 · Hospitality · 860 seats
Harbour & Vale
An open port, closed before breakfast.
Sofia Marchetti · Group IT Director
- 4minutes from alert to contained
- 6days the first incident ran, before Palisade
- 34hotels on one timeline
- Respond
- Identity
Closed11weeks to a clean SOC 2 Type II reportCase 04 · Fintech · 210 seats
Lumen Pay
SOC 2 in eleven weeks, with a team of two.
Tomás Reyes · CTO
- 11weeks to a clean SOC 2 Type II report
- 86controls mapped to live checks
- 4days of team time for the second audit
- Identity
- Endpoint
- Cloud
Sample customers, demo data
What teams say
The first sweep usually pays for the year.
Security and IT leads on what turned up in week one, and what they stopped worrying about after.
“It ranks by what an attacker would do next. My team stopped arguing about severity and started closing things.”
“Our auditor logged in, read the evidence and left. No screenshots, no spreadsheet, no three-week scramble.”
“A key hit a public repository at 2 am. Palisade had it revoked before I had found my glasses.”
“Depot managers fix their own devices now, because the message tells them exactly what to press.”
What teams say
The first sweep usually pays for the year.
Security and IT leads on what turned up in week one, and what they stopped worrying about after.
“The first sweep found a global admin who had left the company seven months earlier. That one finding paid for the year.”
“It ranks by what an attacker would do next. My team stopped arguing about severity and started closing things.”
“Our auditor logged in, read the evidence and left. No screenshots, no spreadsheet, no three-week scramble.”
“A key hit a public repository at 2 am. Palisade had it revoked before I had found my glasses.”
“Depot managers fix their own devices now, because the message tells them exactly what to press.”
What teams say
The first sweep usually pays for the year.
Security and IT leads on what turned up in week one, and what they stopped worrying about after.
“The first sweep found a global admin who had left the company seven months earlier. That one finding paid for the year.”
“It ranks by what an attacker would do next. My team stopped arguing about severity and started closing things.”
“Our auditor logged in, read the evidence and left. No screenshots, no spreadsheet, no three-week scramble.”
“A key hit a public repository at 2 am. Palisade had it revoked before I had found my glasses.”
“Depot managers fix their own devices now, because the message tells them exactly what to press.”
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected