Tozny - Customer Case Study

Tozny—a security and privacy-software solutions company based in Portland, OR— engineered InnoVault, a toolkit that makes crypto easy for developers with the first end-to-end encrypted object store. In a few lines of code, developers can encrypt user data in a browser or mobile app, store it encrypted, and access it as a JSON object after decryption in the client. The company uses Lambda@Edge, the new Lambda feature triggered by Amazon CloudFront events that lets users easily run code across AWS locations globally and provides end users with the lowest latency response. InnoVault protects cryptographic code against rogue scripts, malicious replacement of JavaScript, and HTTPS downgrade. This is accomplished with a Lambda@Edge function that efficiently adds security headers such as Content Security Policy, Strict Transport Security, and XSS protection. “Lambda@Edge helps us achieve both scale and security for our cutting-edge browser-based cryptography product, which helps developers improve the security of their software from the ground up,” says Tozny CEO Isaac Potoczny-Jones.