Tripledot Studios Gains Full Visibility and Intelligent Risk Prioritization with AWS and Orca Security

As one of the fastest growing companies in Europe, Tripledot Studios is passionate about creating high-quality, evergreen games for its millions of customers around the world. In a span of three years, the studio saw exponential growth in its employee base, going from 30 to 500 people.

Being a cloud-native startup, Tripledot’s growth was a huge success from the product side. However, when it came to securing its data, the company’s small DevOps team relied entirely on manual processes—including following up on common vulnerabilities and exposures (CVEs) and updating its software. This required Tripledot to spend substantial amounts of time eliciting actionable insights from its security data to identify vulnerabilities while making timely software updates. Overall, the manual processes weakened the studio’s security posture and slowed down operations.

After a thorough evaluation, Tripledot turned to AWS Partner Orca Security—a purpose-built solution for securing Amazon Web Services (AWS) environments. “The Orca Security Platform helps organizations like Tripledot understand the full context of their cloud risks, including misconfigurations of cloud infrastructure and vulnerabilities,” explains Keith Mokris, VP of marketing and evangelism at Orca. Orca’s deep integration with AWS services permits the platform to consolidate all data from Tripledot’s AWS cloud infrastructure—including its Amazon Elastic Kubernetes Service (EKS) workloads, identities and entitlements, and APIs—giving the ultimate context for risk prioritization. Additionally, Orca helps manage and optimize Identity and Access Management (IAM) policies within AWS environments.

Unlike other security solutions that require significant onboarding and configuring, the Orca Security Platform is agentless, easy to use, and only required a simple installation process for Tripledot. “Orca started securing Tripledot’s AWS cloud infrastructure the day it was installed with clear and accurate alerts, including risk prioritization,” states Alex Kazeko, CTO at Tripledot Studios. The gaming studio has since reduced security risks with full coverage, implemented identity management, and saved valuable time by eliminating manual processes.

Tripledot has several types of player data that it relies on—including users’ personal information, game data, device information, and usage data and diagnostics. As the studio grew, however, its manual approach to security was not sustainable. “Prior to Orca, Tripledot’s data was exposed to unknown vulnerabilities and risks, but these were immediately mitigated when we launched Orca’s platform,” explains Kazeko. Now, its data protection is automated, working constantly without manual tasks. Plus, Tripledot’s AWS DevOps team can log into the Orca dashboard for clear visuals and descriptions of potential gaps to proactively remediate issues.

With an automated security solution in place, Tripledot no longer relies on manual efforts for its security strategy. “Working with Orca has eliminated several manual tasks for our team. When vulnerabilities or risks emerge, Orca immediately alerts us with the full context,” remarks Kazeko. Alerts are accompanied with risk prioritization so that Tripledot can resolve issues efficiently and quickly. Orca’s agentless security platform provides Tripledot with the confidence it needs to ensure its volumes of data are secure. It also detects and automates software updates.

Orca’s compliance module simplifies processes for Tripledot as requirements for multiple compliance frameworks continue to increase. “Orca provides the benefits and capabilities that enhance the security of AWS, allowing customers like Tripledot to do this work easily with very little friction,” explains Mokris. “For the size of our team, the compliance functionality of Orca gives us a really good starting place. We’re excited about continuing our relationship with Orca,” affirms Kazeko.