We utilize artificial intelligence for site translations, and while we strive for accuracy, they may not always be 100% precise. Your understanding is appreciated.
Home/
Blog
/
HiBob Prevents Malicious File Uploads with OPSWAT…
Internet & Software | Customer Stories
HiBob Prevents Malicious File Uploads with OPSWAT Technology
How MetaDefender Storage Security secures file uploads from external sources for a leading HR software company.
Share this Post
About Company: HiBob is a global, cloud-native, human resources tech company with an application responsible for managing the entire employee lifecycle—onboarding, time and attendance, compensation, performance review, tasks, and offboarding.
Customers appreciate HiBob's HR platform Bob for its ease of use, high configurability, and ability to customize based on business requirements. The platform’s high adaptability and focus on people engagement and community creation are seen in its consumer-grade user interface, which provides easy access to HR processes while fostering engagement.
What's the story? A year ago, HiBob established a hiring model - Bob Hiring - for their 4,000 customers worldwide in which external candidates could submit their application documents for specific jobs via a portal. Their main concern centered around file sanitization, with an emphasis on preserving data integrity and shielding against potential malware threats. Recognizing the need to strengthen their file-security measures, the company needed to integrate a critical layer of protection for incoming external files. Furthermore, the solution they selected needed to seamlessly fit into their existing AWS S3 cloud infrastructure.
OPSWAT's MetaDefender Storage Security with Deep CDR™ (content disarm and reconstruction) and Multiscanning technologies seamlessly integrated into their existing environment and have significantly strengthened their defenses against malware and zero-day vulnerabilities. This is their story.
File uploads from unidentified external sources to internal networks leave enterprises exposed to cyberattacks unless adequate security measures are put in place. Threat actors can leverage popular file types to hide malicious content, infiltrating critical networks to gain unauthorized access and cause harm.
HiBob, a cloud-native human resources software company, recently faced this challenge when they rolled out a hiring solution for thousands of customers globally. HiBob’s application allowed external candidates to log into a portal and submit their application documents for specific jobs.
Recognizing the need to enhance security measures, HiBob needed to implement a layer of protection that would scan all files inbound from external sources to dramatically reduce the risk of potential malware or zero-day attacks entering their internal networks.
We were looking for a CDR solution to ensure that every file uploaded to our platform would be free from malicious code.
Tamir Ronen
Chief Information Security Officer, HiBob
Updating Old Security Measures with Deep CDR
Tamir Ronen, Chief Information Security Officer at HiBob explained, without the ability to scan a wide range of file types, “malicious files could be uploaded by anonymous users from external sources. Every file uploaded by them can be a risk for cross-site scripting (XSS), web shell, or other forms of attack on our application by those files.
HiBob required a CDR solution that would enhance their ability to eliminate zero-day malicious code. OPSWAT’s Deep CDR capabilities met this challenge while also providing compatibility with their cloud-native architecture, specifically integrating with their cloud infrastructure. and using OPSWAT Multiscanning provided a capability to detect a far wider range of file types. And OPSWAT’s ability to ingest large volumes of scanning files. After evaluating various options, OPSWAT’s MetaDefender Storage Security with Deep CDR and Multiscanning technologies stood out as the obvious choice.
Solving 3 Primary Objectives
OPSWAT solutions were able to deliver the results HiBob was looking for in three critical areas:
Enhanced Security: By deploying OPSWAT's solution, HiBob achieved a comprehensive “zero-trust” approach to file-upload security, significantly reducing the risk of malware and other threats entering their platform. “As part of the POC, we tested OPSWAT with malicious files created by our security team, which resulted in [Deep CDR] successfully removing the malicious code from those files every time,” Ronen explained.
Seamless Integration: OPSWAT's solutions easily integrated with HiBob's cloud environment, with almost no disruption to existing workflows while enhancing security measures.
“One of the most important factors we looked for, in addition to the technology, was the possibility to implement the product as quickly as possible and without operational problems,” Ronen continued.
“Because when we are in a full-cloud environment, many problems can occur, and we wanted the product to work in a clean and smooth manner…. MetaDefender Storage Security was easy to deploy in our cloud environment and that was a very important factor.”
Data Integrity: With OPSWAT's Deep CDR capabilities, HiBob could confidently sanitize files uploaded by external entities/customers, maintaining data integrity and mitigating security risks.
With a CDR solution [like OPSWAT], we can be sure that files uploaded to our platform are clean of all malware.
Tamir Ronen
Chief Information Security Officer, HiBob
A Zero-Trust Approach to File Security
To protect their platform and network, HiBob collaborated with OPSWAT to develop a ”zero-trust” approach to securing file uploads. Using an approach that was uncompromising when it came to files passing through to their secure network, MetaDefender Storage Security treated all incoming files as potentially malicious.
How Deep CDR™ Works
HiBob chose MetaDefender Storage Security for the following capabilities:
Detect and Neutralize Zero-day Exploits
With Deep CDR files are scanned, sanitized, reconstructed, and made safe for use. Having recently achieved a 100% Protection and Accuracy Score from SE Labs, Deep CDR supports over 150 file types, including PDFs, archives, and file formats that support archives. The solution allows users to detect over 99% of known malware in files with market leading Multiscanning technology using 30+ antivirus engines.
Proactive Discovery
HiBob can now uncover vulnerabilities in installers, binaries, or applications before they are installed and plug any security holes.
Increased Detection
Deep CDR allows HiBob to discover zero-day malware and extract indicators of compromise (IOCs) with adaptive threat analysis technology.
Threat Visibility
OPSWAT provides visibility into the health of enterprise data storage and flags potential threats with a simple dashboard.
Ensuring Overall Platform Protection
OPSWAT's defense-in-depth solution addressed HiBob's requirements for cloud-native-file-upload security. It easily integrated with their cloud environment and provided comprehensive threat detection and deep content sanitization. By partnering with OPSWAT, HiBob strengthened their security posture, ensuring the protection of their platform to provide a safe HR solution for their customers.
To see how OPSWAT’s innovative solutions can keep your critical infrastructure secure, talk to an expert today.
