“The first sweep found a global admin who had left the company seven months earlier. That one finding paid for the year.”
SOC 2 Type II · ISO 27001 · 1,400 security teams
SOC 2 Type II · ISO 27001 · 1,400 security teams
Palisade
Palisade
Risk score82/100open
Next page/
Home
Case 01 · Staffing · 1,150 seats
We found 340 accounts that belonged to nobody.
Calder StaffingImogen Hartley · Head of IT
- 340orphaned accounts closed in week one
- 22admin accounts removed
- 0leaver accounts open after 24 hours
- 01
Challenge
Found openCalder creates an account for every temporary worker it places, about 9,000 a year. Placements end on short notice, and the offboarding checklist lived in a shared spreadsheet that nobody owned.
- 02
Approach
In progressPalisade was connected to the directory and to payroll on a Tuesday afternoon. By the evening it had matched every account to a person, or to nobody.
- 340 accounts had no owner
- 22 of them held admin rights
- 61 still had mail forwarding switched on
- 03
Result
SecuredOffboarding now closes access the same day a placement ends, without a checklist. Admin rights are reviewed every month and take ten minutes.
Case 01 · Staffing · 1,150 seats
We found 340 accounts that belonged to nobody.
Calder StaffingImogen Hartley · Head of IT
- 340orphaned accounts closed in week one
- 22admin accounts removed
- 0leaver accounts open after 24 hours
- 01
Challenge
Found openCalder creates an account for every temporary worker it places, about 9,000 a year. Placements end on short notice, and the offboarding checklist lived in a shared spreadsheet that nobody owned.
- 02
Approach
In progressPalisade was connected to the directory and to payroll on a Tuesday afternoon. By the evening it had matched every account to a person, or to nobody.
- 340 accounts had no owner
- 22 of them held admin rights
- 61 still had mail forwarding switched on
- 03
Result
SecuredOffboarding now closes access the same day a placement ends, without a checklist. Admin rights are reviewed every month and take ten minutes.
Case 01 · Staffing · 1,150 seats
We found 340 accounts that belonged to nobody.
Calder StaffingImogen Hartley · Head of IT
- 340orphaned accounts closed in week one
- 22admin accounts removed
- 0leaver accounts open after 24 hours
- 01
Challenge
Found openCalder creates an account for every temporary worker it places, about 9,000 a year. Placements end on short notice, and the offboarding checklist lived in a shared spreadsheet that nobody owned.
- 02
Approach
In progressPalisade was connected to the directory and to payroll on a Tuesday afternoon. By the evening it had matched every account to a person, or to nobody.
- 340 accounts had no owner
- 22 of them held admin rights
- 61 still had mail forwarding switched on
- 03
Result
SecuredOffboarding now closes access the same day a placement ends, without a checklist. Admin rights are reviewed every month and take ten minutes.
What teams say
The first sweep usually pays for the year.
Security and IT leads on what turned up in week one, and what they stopped worrying about after.
01 of 05
Closed02
“It ranks by what an attacker would do next. My team stopped arguing about severity and started closing things.”
Closed03
“Our auditor logged in, read the evidence and left. No screenshots, no spreadsheet, no three-week scramble.”
Closed04
“A key hit a public repository at 2 am. Palisade had it revoked before I had found my glasses.”
Closed05
“Depot managers fix their own devices now, because the message tells them exactly what to press.”
What teams say
The first sweep usually pays for the year.
Security and IT leads on what turned up in week one, and what they stopped worrying about after.
01 of 05
Closed01
“The first sweep found a global admin who had left the company seven months earlier. That one finding paid for the year.”
Closed02
“It ranks by what an attacker would do next. My team stopped arguing about severity and started closing things.”
Closed03
“Our auditor logged in, read the evidence and left. No screenshots, no spreadsheet, no three-week scramble.”
Closed04
“A key hit a public repository at 2 am. Palisade had it revoked before I had found my glasses.”
Closed05
“Depot managers fix their own devices now, because the message tells them exactly what to press.”
What teams say
The first sweep usually pays for the year.
Security and IT leads on what turned up in week one, and what they stopped worrying about after.
01 of 05
Closed01
“The first sweep found a global admin who had left the company seven months earlier. That one finding paid for the year.”
Closed02
“It ranks by what an attacker would do next. My team stopped arguing about severity and started closing things.”
Closed03
“Our auditor logged in, read the evidence and left. No screenshots, no spreadsheet, no three-week scramble.”
Closed04
“A key hit a public repository at 2 am. Palisade had it revoked before I had found my glasses.”
Closed05
“Depot managers fix their own devices now, because the message tells them exactly what to press.”
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected