To further security visibility, HelloSign uses Amazon GuardDuty, a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect AWS accounts, workloads, and data stored in Amazon S3. “We use the Amazon Inspector findings as part of our patch management automation process, saving a lot of time and resources in updating our software and systems,” says Kirtika Dommeti, senior security engineer at HelloSign.

For vulnerability management, HelloSign uses Amazon Inspector, which helps improve the security and compliance of applications deployed on AWS by assessing them for vulnerabilities and checking for unintended network accessibility. Amazon Macie functions at scale and without off-loading data to a third party. Strengthening Security Posture on AWSĪt the first layer of HelloSign’s security solution is Amazon Macie, a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect sensitive data in Amazon S3 buckets.

Rather than adopting security services piecemeal, HelloSign quickly implemented a suite of AWS security services into its internal workflow. HelloSign already trusted AWS for its infrastructure, storing encrypted data using Amazon Simple Storage Service (Amazon S3), object storage built to retrieve any amount of data from anywhere. HelloSign wanted a scalable, robust option that wouldn’t require data to be off-loaded to a third-party solution-potentially giving outside companies access to PII and therefore requiring a time-consuming security review process. HelloSign decided to boost its security posture, including gaining visibility into its web application security and proactively identifying stored PII data so that it could identify where to place additional controls. When it acquired HelloSign, Dropbox provided customers the ability to send, sign, and store documents online without leaving Dropbox. Dropbox is a smart workspace that offers file synchronization and sharing features to optimize workflows.

Dropbox hellosign