TechValidate Research on Venafi

Introduction

This case study of a Global 500 financial services company is based on a September 2015 survey of Venafi customers by TechValidate, a 3rd-party research service.

Challenges

• Managed their keys and certificates using manual tracking and management (e.g., spreadsheet) before Venafi.
• Problems solved using Venafi:
  • Data Security / SSL Inspection / Threat Detection
  • Identity and Access Management (including Privileged Access Management/SSH)

Use Case

• Venafi product currently being used:
  • TrustAuthority SSL
• System integrated with Venafi:
  • Private Certificate Authority

Results

• Improved their internal IT services SLA from days to hours with Venafi.
• Key and certificate visibility improved by 51-75% after finding additional keys and certificates using Venafi.
• Vulnerabilities to be addressed with Venafi:
  • SHA-1 to SHA-2 migration
  • Key and certificate ownership identification
  • Key and certificate lifecycle policies

Challenges

• Business challenges that led to purchasing Venafi:
  • Avoid certificate-related outages
  • Automate certificate management to lower costs and resource usage

Budget Justification

• Justified budget for Venafi because of their need to avoid certificate-related outages.
• Information Security department took the lead in purchasing Venafi.

Results

The surveyed company achieved the following results with Venafi:

• Have 51 to 75 lines of business or departments directly interacting with the Venafi platform.
• Top benefits experienced or will experience with Venafi:
  • Prevented and remediated outages
  • Improved effectiveness of existing security
• Saved $20,000 annually by using Venafi.

Next Steps

• Plans to expand their use of Venafi in the following ways:
  • Expand their use of Venafi to other departments
  • Expand their use of Venafi to other use cases (e.g., code-signing, SSH, Mobility, DevOps support, etc.)
  • Expand their use of Venafi to cover more keys and/or certificates