Enhancing Offshore Security: How Keeper Security and DrillDocs Collaborate for Better Identity Management

Strengthening Offshore Operations with Keeper Security

Keeper Security, a leader in the fields of zero-trust and identity security, recently showcased its partnership with DrillDocs, a tech startup focused on computer vision software for the offshore oil and gas sector. This collaboration has led to a modernization of identity security that enables DrillDocs to manage privileged access effectively across a decentralized workforce.

The Need for Improved Security

In the evolving landscape of technology startups, especially those working in high-stakes environments like oil and gas, the necessity for rigorous security solutions is paramount. DrillDocs recognized the challenges posed by collaboration with third-party engineering partners, who often operate using personal devices. This dispersed work culture raised significant concerns regarding credential security and unauthorized access to sensitive information.

DrillDocs had previously established a solid foundation for secure DevOps practices through Keeper's Secrets Manager, which ensured that credentials were managed safely during automated deployments. However, as the company expanded globally and included external engineering services to support constant production, the complexity of managing secure access increased notably. This realization compelled DrillDocs’ leadership to seek a solution that could provide sophisticated visibility and control over privileged activities.

Solution: KeeperPAM

The introduction of KeeperPAM (Privileged Access Management) proved to be the game changer for DrillDocs. This modern, AI-enabled platform consolidates various aspects of access management into one comprehensive, zero-trust framework. By allowing engineers and external partners to connect securely to production systems through browser-based sessions, KeeperPAM negated the need for traditional VPNs while drastically reducing the risk of exposing credentials.

Francois Ruel, Co-founder and Chief Science Officer at DrillDocs, commented, "We were becoming increasingly worried about managing security when work is conducted from personal computers. Although we trust our partners, a shift to a culture of 'trust-but-verify' was essential." This philosophy is at the heart of Keeper's approach: ensuring that every element of access is authenticated and monitored, thus minimizing security risks.

Seamless Onboarding and Rapid Implementation

Implementing KeeperPAM into DrillDocs’ existing operations was surprisingly seamless. Ruel noted that the onboarding process took only a couple of hours on the day they decided to initiate the trial, which then enabled immediate utilization of the platform. This quick deployment replaced ineffective informal access processes with a robust security framework that aligned with their operational risks.

Moreover, KeeperPAM's capability to provide recorded and auditable sessions means that all interactions are logged, fostering compliance and accountability, crucial for meeting standards like SOC 2 and beyond.

A Universal Challenge in Security

The success story of DrillDocs is relevant to numerous industries, not just the offshore drilling sector. Darren Guccione, CEO and Co-founder of Keeper Security, emphasized, "The security challenges faced by DrillDocs are not isolated. Any organization that grants privileged access to external collaborators, whether in multi-cloud environments or across a decentralized workforce, encounters significant exposure and risk. The reliance on implicit trust is simply not a viable security model."

KeeperPAM addresses these universal challenges by enforcing verified access control across all users and devices, ensuring that organizations are protected from emerging threats in an increasingly complex digital landscape.

Conclusion

The partnership between Keeper Security and DrillDocs serves as a model for how technology companies can adapt to modern security needs. By employing advanced identity management solutions, businesses can not only secure sensitive data but also foster a culture of trust backed by verification. In a world where security must keep pace with innovation, successful collaborations like this exemplify the future of secure business operations.

For a deeper dive into the specifics of how DrillDocs structured its access management and the steps taken to ensure compliance, the full case study can be accessed on Keeper's official website.