Signal Sciences > Case Studies > Vimeo: Enhancing Security and Scaling Attack Detections with Immediate Impact

Vimeo: Enhancing Security and Scaling Attack Detections with Immediate Impact

Technology Category

Cybersecurity & Privacy - Application Security
Cybersecurity & Privacy - Intrusion Detection

Applicable Industries

Cement
National Security & Defense

Applicable Functions

Maintenance

Use Cases

Supply Chain Visibility
Tamper Detection

Services

Testing & Certification

About The Customer

Vimeo is a leading professional video platform that provides powerful tools for hosting, sharing, and streaming high-definition video. With over 150 million users globally and a number of recent acquisitions, Vimeo is experiencing rapid growth. Despite this, the company remains highly focused on ensuring that creators and viewers have a seamless experience on their site. To support its recent growth, Vimeo recognized the need to strengthen its current application security program to prevent prevalent attacks and ensure the safety and security of its users and their data.

The Challenge

Vimeo, the world’s leading professional video platform, faced a significant challenge in maintaining the security of its rapidly expanding user base, which includes over 150 million users globally. The company's rapid growth and recent acquisitions necessitated a robust application security program to prevent prevalent attacks like XSS, SQLi, API abuse, and account takeover. Additionally, Vimeo needed a solution that would seamlessly integrate with their newly built AWS infrastructure without requiring extensive tooling and upkeep. The company also sought to consolidate all requirements under a single vendor for ease of use across multiple teams. A lack of visibility into production traffic and new merger and acquisition activity further highlighted the need for attack detection modernization.

The Solution

Vimeo implemented Signal Sciences for its comprehensive detection and blocking capabilities, ease of use, minimal configuration and maintenance, and extensive visibility into attacks on their applications. Signal Sciences now provides deep attack detection and blocking capabilities for billions of daily requests on all of Vimeo’s public-facing production sites. Within 30 days, Vimeo was able to install, test, and deploy the solution in production across all of a new acquisition's infrastructure. The 'out of the box' configuration provided immediate uplift for general visibility and stopped a lot of bogus traffic from hitting Vimeo's resources. The solution also allowed Vimeo to deploy across all their newly acquired properties quickly, providing them with traffic insights they previously lacked.

Operational Impact

The implementation of Signal Sciences has resulted in significant operational benefits for Vimeo. The solution's immediate time-to-value was a critical selling point, providing uplift not only for general visibility but also for stopping a lot of bogus traffic from hitting Vimeo's resources. This has resulted in lower resource utilization and nearly non-existent operational expenses, allowing Vimeo to direct manpower towards more critical tasks. Furthermore, with better visibility into their traffic signals and more dedicated resources, Vimeo has been able to take on security projects with the data and automation Signal Sciences provided. In one unique use case, Vimeo implemented a callback to automatically roll back user accounts flagged for suspicious behavior, enhancing user protections while complementing other in-house tooling for the safest and best user experience.

Quantitative Benefit

Signal Sciences was installed, tested, and deployed in production across all of a new acquisition's infrastructure within 30 days.
Signal Sciences provides deep attack detection and blocking capabilities for billions of daily requests on all of Vimeo’s public-facing production sites.
Signal Sciences requires no rules or ongoing maintenance to stop OWASP Top 10 attacks, saving Vimeo hours of tuning and testing.