Case Study: Instacart achieves zero standing privileges with ConductorOne

How Instacart is using AI to achieve zero standing privileges

Instacart, the leading grocery technology company in North America, faced challenges with long-lived privileged access creating security vulnerabilities. Their manual, manager-based approval process was inefficient and lacked a centralized view of access controls. To solve these issues, they partnered with ConductorOne to implement its identity governance and access control platform, seeking to move to a zero standing privileges model with automated, just-in-time access.

ConductorOne provided a solution built around its conditional policy engine, which allowed Instacart to automate 95% of just-in-time access approvals for cloud infrastructure and internal applications. The vendor's integration enabled the creation of over 100 granular policies codified as infrastructure-as-code. As a result, Instacart successfully moved 100% of its privileged access to automated, policy-based JIT, freeing up valuable engineering time, streamlining audits, and significantly improving their security posture.

Instacart

Matthew Sullivan

Infrastructure Security Team Leader