Why Lionbridge Chose Valence to Remediate their SaaS Security Risks

Challenges

Automated SaaS Risk Discovery & Remediation

Lionbridge empowers its employees to independently adopt the most effective SaaS applications for their jobs, enabling the organization to respond to market needs efficiently. However, an independent adoption approach has led to decreased visibility into the cloud services, SaaS-to-SaaS integrations, user identities, privileges, and data sharing permissions in place leaving the security team at a disadvantage. Manual oversight over hundreds of integrations and settings also proved to be unsustainable long term for a team committed to a lean structure with multiple high-priority projects. Finding a solution that met Lionbridge’s needs while preserving time and resources was high on the security team's wish list.

‍

Lionbridge’s SaaS Environment

Lionbridge presented several use cases to Valence because they connect with customers through diverse methods, sometimes leveraging proprietary platforms developed internally, third party SaaS platforms, and even utilizing customer-managed solutions. Flexibility in how Lionbridge connects with their customers facilitates efficient exchange of data, content, and ideas. While their primary productivity suite is Microsoft 365, Lionbridge also operates a sizeable footprint of alternative architecture such as Google Workspace and uses business apps for daily operations, such as a Customer Relationship Management platform. Plainly stated, their SaaS mesh is expansive and complex.

Results

Setting policies was simple and efficient. Lionbridge was able to revoke 95% of obsolete or inactive tokens almost immediately. More than 20% were revoked by business users themselves with guidance natively available through Valence’s remediation workflows. Business users provided justification for 5% of the tokens and 75% were revoked automatically by Lionbridge through Valence after the security team deemed them obsolete.

Today, Lionbridge oversees fully automated remediation workflows, replacing previously manual processes and time-consuming analysis with efficient oversight. Now configured, Valence can run without human interference. Nevertheless, Lionbridge retains the ability to log into the Valence platform to gather metrics for reporting purposes. By engaging with business users, the tool also increases education and awareness across the organization about good SaaS security hygiene.

As Lionbridge received regular updates, upgrades, and new features, they have expanded their remediation workflows to detect and eliminate external data oversharing, overprivileged and inactive user accounts, and unrestricted email forwarding rules. With Valence’s reporting mechanisms, the security team can now demonstrate the efficacy of SaaS integration management while reducing their corporate attack surface.