Since implementing Endor Labs’ AppSec platform, Rubrik has experienced several major changes and positive outcomes relating to speed, trust, achieving compliance rigor, and operational efficiency. Today they use Endor Labs for SCA, SAST, container scanning, and secret detection.

“Time-to-value was almost instant. This was a big difference from most vendors where you spend a year deploying and upgrading processes just to make it work.”

• Marty Garvin, Head of Security @ Rubrik

Rapid response to malware attacks

Rubrik gained immediate, comprehensive visibility into its dependency usage that allows them to quickly rule out or confirm exposure during supply chain attacks. Following a recent npm malware disclosure, the team was able to determine they weren’t using any affected versions from 187 compromised packages within approximately 30 minutes of the attack becoming public. And they continue to use Endor Labs to monitor for the significant number of compromised packages that grew out of the Shai-Hulud attack.

“When it comes to malware attacks, Endor Labs helps me sleep better at night because I know we can quickly figure out whether we’re impacted, and if not, move on with our day.”

• Marty Garvin, Head of Security @ Rubrik

Fast remediation and better MTTR

Endor Labs’ accuracy has been pivotal in helping the team establish confidence in findings, eliminating the time required to manually validate issues. With correlation between SCA and container findings, the team has implemented their “one ticket, one fix” dream. Today, they’re better positioned to satisfy aggressive SLAs required for FedRAMP authorization. The security team can now spend more time partnering with the business and focusing on impactful tasks like threat modeling and secure design reviews.

“Endor Labs gives us the data to see what’s exploitable and needs to be fixed. We have tight remediation SLAs, as short as 24 hours, and Rubrik is consistently hitting them because we don’t have to argue over whether a finding is real.”

• Marty Garvin, Head of Security @ Rubrik

Security shifting left

Engineering teams know that it’s easier to fix vulnerabilities when they’re found in development compared to ripping things out after the product has been released. But teams using Bazel monorepos often struggle to shift security left because existing SCA tools provide incomplete or inaccurate results. Endor Labs’ baked-in Bazel capabilities made it possible for Rubrik to embed scanning in CI, so issues are raised before PRs are merged. And with a more accurate picture of their dependencies, the security team has the crucial ability to reliably identify unused dependencies. Now they can approach engineering with high assurance when suggesting the removal of unused dependencies.

“Endor Labs' native Bazel integration is the best on the market. It’s eliminated the previous complexity, delivering the confidence required to shift left and reliably identify/remove unused dependencies.”

• Kevin Vaughan, Senior Manager Information Security @ Rubrik

Sustaining FedRAMP rigor

Rubrik’s pursuit of FedRAMP Moderate authorization positioned the company to sell to the government, but maintaining this certification requires significant program management, constant vigilance against new issues, and extensive documentation and evidence gathering for continuous monitoring (ConMon) requirements. Endor Labs’ high fidelity findings and consolidated platform reduce the manual work required to validate results and produce evidence for the 3PAO. This efficiency allows Rubrik to navigate the never-ending exercise of scanning, validating, and ensuring compliance, enabling them to meet the exacting audit standards required for maintaining FedRAMP authorization.

“Our FedRAMP environment requires more rigor than you would normally get in any other kind of product release, with near zero tolerance for vulnerabilities. Endor Labs’ reachability analysis and consolidated findings reduced the number of true positives requiring remediation, which is a huge time- and money-saver.”

• Marty Garvin, Head of Security @ Rubrik

Looking Ahead

The team is looking forward to several future advancements and applications of Endor Labs, including:

• Achieving faster SAST triaging through false positive reduction (enabled by call graphs and LLMs)
• Discovering whether container vulnerabilities are reachable at the OS layer
• Improving the security of AI-generated code by integrating scanning with tools like Cursor