Canva opts for SentinelOne

Online design and visual communications platform Canva is pure cloud, with no enterprise infrastructure like on-premise servers and networks. To defend the expanded attack surface this creates, Canva has had to redesign its approach to security, opting to work with SentinelOne.

“Our environment is quite unique,” said Raymond Schippers, Head of Detection and Response, Canva.

“We have everything in the cloud and our workers are all agile, so we need to make sure that our endpoints are really well protected and our workloads are secure. That means being able to quickly and easily determine what applications are installed on our developers’ machines and throughout our entire environment, and if there are any vulnerabilities, act swiftly to remediate and mitigate them,” he said.

Canva is relying on SentinelOne to do this, using its Singularity XDR solution.

Visibility, protection and response

“When it comes to threat detection and response, you have to have visibility and control,” Schippers said.

“Prevention is the key, but nothing can be 100% prevented. As a result, having a full understanding of what has occurred and the ability to quickly query that across your environment and rapidly respond and remediate is critical. The enhanced visibility across our fleet that SentinelOne provides is incredible. The platform is not only able to identify people who are doing things that aren’t necessarily in line with compliance, but also identify new use cases for different pieces of software.”

Singularity XDR’s ability to ingest structured, unstructured and semi-structured data in real time from any technology product or platform is paying dividends as well.

“With a lot of vendors, there are limitations about what they can see and how they provide that visibility,” he said. “But with SentinelOne, there is almost feature parity across platforms — Mac, Windows and Linux — and that has been incredibly helpful for us, because our security engineers don’t have to think about, ‘What platform is this? What are the limitations that we have in this platform? What are the potential visibility gaps?’ They know we have a reliable feed of what’s happening on the endpoint through the EDR, and can rapidly respond to attacks, no matter what platform they are on.”

Deploying Singularity XDR at Canva has, according to Schippers, “been very straightforward”, and he said the autonomous platform will remain at the heart of the company’s security strategy.

“As attacks become more sophisticated, being able to respond rapidly will become much more important. SentinelOne will be an important partner, as they enable us to rapidly scale up our security capabilities and manage future threats today,” he said.

Image credit: iStock.com/TU IS