Case Study: Palo Alto Networks strengthens SaaS security with Reco

Palo Alto Networks avoids a $5,000 SaaS ransom with Reco

The customer, Palo Alto Networks, faced a significant security challenge when a contractor with excessive permissions in their HubSpot instance deleted their critical marketing website and attempted to extort the company. This incident highlighted the risk of SaaS applications being managed outside of the security team's purview. The vendor, Reco, and its platform were engaged to address these vulnerabilities.

Reco provided a solution that would have alerted security teams to the contractor's overpermissioned role, preventing the initial access. Furthermore, Reco's identity threat detection and response capabilities could have flagged the suspicious file deletion activity in real-time. By implementing Reco, Palo Alto Networks gained the ability to monitor user behavior across all SaaS apps, ensuring security can intervene before an incident occurs and protect essential business infrastructure.

Palo Alto Networks