Over the last four years, we have seen rapid growth in sensitive data stored on the cloud, particularly for support agents using Zendesk. This is highlighted by Zendesk’s own CX Trends 2022 Report found that ticket volume had increased across all channels, with webform/email up 10% YoY and chat up 17% YoY.
These findings are supported by a recent study my team at Nightfall completed across thousands of organizations that found on average 10+ API keys unprotected in Zendesk. This makes Zendesk an attractive target for hackers looking for PII, PHI, Passwords and API Keys, and payment information.
I’ve written up a post detailing how to clean up Zendesk to prevent the likelihood of a threat actor getting away with anything sensitive.
Please let me know if you have any questions or feedback.
Hey everyone, Rohan Sathe here. I wanted to share with HN my journey as a developer, going from building Uber Eats, to discovering a problem that’s the bane of all developers -- sensitive data sprawl across engineering services, which leads to all sorts of data security risks. This is a problem I most prominently encountered as one of the founding Engineers at Uber Eats. You can read my story to learn how I’ve solved this problem in a way that can hopefully benefit every developer working on applications or services that ingest lots of sensitive data.
Nightfall is a cloud-native data protection and classification platform.
Our mission is to bring efficiency and efficacy to data protection. We partner with organizations and software platforms to ensure the sensitive data that people entrust them with every day is kept safe & secure. We’re reimagining data security & compliance through a cloud-native, accurate, and performant platform.
Nightfall AI | Fully Remote | Full-time | https://nightfall.ai/
Nightfall is a cloud-native data protection and classification platform.
Our mission is to bring efficiency and efficacy to data protection. We partner with organizations and software platforms to ensure the sensitive data that people entrust them with every day is kept safe & secure. We’re reimagining data security & compliance through a cloud-native, accurate, and performant platform.
Nightfall is a cloud-native data protection and classification platform.
Our mission is to bring efficiency and efficacy to data protection. We partner with organizations and software platforms to ensure the sensitive data that people entrust them with every day is kept safe & secure. We’re reimagining data security & compliance through a cloud-native, accurate, and performant platform.
Nightfall AI | Senior/Staff Backend and DevOps/SRE | REMOTE, ONSITE | USA, Canada (HQ: San Francisco, CA) | https://nightfall.ai Nightfall is a data security startup dedicated to helping enterprises discover, classify, and protect sensitive data across their cloud footprint - their corporate SaaS, data infrastructure, and APIs - via machine learning.
- We’re looking for folks passionate about working at the intersection of deep learning, information security, and distributed systems.
Nightfall AI | Backend, Machine Learning, Full Stack | REMOTE | https://nightfall.ai
Nightfall is a data security startup dedicated to helping enterprises discover, classify, and protect sensitive data across their cloud footprint - their corporate SaaS, data infrastructure, and APIs - via machine learning.
- We’re looking for folks passionate about working at the intersection of deep learning, information security, and distributed systems.
Nightfall AI | Backend, Fullstack (staff, senior, mid level, new grad) | REMOTE, ONSITE | USA, Canada | https://nightfall.ai Nightfall is a data security startup dedicated to helping enterprises discover, classify, and protect sensitive data across their cloud footprint - their corporate SaaS, data infrastructure, and APIs - via machine learning.
- We’re looking for folks passionate about working at the intersection of deep learning, information security, and distributed systems.
Nightfall AI | Backend, Fullstack| REMOTE | USA, Canada, India| https://nightfall.ai Nightfall is a data security startup dedicated to helping enterprises discover, classify, and protect sensitive data across their cloud footprint - their corporate SaaS, data infrastructure, and APIs - via machine learning. - We’re looking for folks passionate about working at the intersection of deep learning, information security, and distributed systems.
- Tech Stack: Go, Node.js, React, Python, Cassandra, Redis, Terraform, Docker, Kubernetes.
- Raised $20M+ from top-tier VC investors who have invested in, operated at, taken public/exited major cybersecurity & SaaS companies.
Over the last four years, we have seen rapid growth in sensitive data stored on the cloud, particularly for support agents using Zendesk. This is highlighted by Zendesk’s own CX Trends 2022 Report found that ticket volume had increased across all channels, with webform/email up 10% YoY and chat up 17% YoY.
These findings are supported by a recent study my team at Nightfall completed across thousands of organizations that found on average 10+ API keys unprotected in Zendesk. This makes Zendesk an attractive target for hackers looking for PII, PHI, Passwords and API Keys, and payment information.
I’ve written up a post detailing how to clean up Zendesk to prevent the likelihood of a threat actor getting away with anything sensitive.
Please let me know if you have any questions or feedback.
Cheers, Rohan