Case Study: HealthVerity reduces critical cloud alerts with Lacework

HealthVerity cures critical alerts with clear diagnosis

HealthVerity, a healthcare data platform serving more than 330 million patients and 150 billion transactions, needed a scalable way to protect HIPAA-compliant cloud environments as it grew from 5 cloud accounts to hundreds. Existing CSP security tools and manual reviews weren’t enough to find hidden misconfigurations, prioritize issues, and keep pace with rapid expansion.

Lacework helped HealthVerity continuously assess its AWS environment against HIPAA and CIS requirements, prioritize alerts with contextual risk scoring, and route findings into Atlassian Jira for developer workflow integration. With Lacework, HealthVerity cut hundreds of critical alerts in the first month down to 22 per week and then to zero, reduced weekly alerts by 60% over the first four months, and improved secure development by shifting security left.

HealthVerity

Jim Shank

VP of Engineering Security