The challenge: the threats that don't make the news
Outplane runs other people's code. Customers deploy their apps on the platform, and their coding agents work inside Outplane's Hangars. The platform also depends on partners and on popular frameworks like .NET and React. So a problem in any of these is not only Outplane's problem. It can quickly become a customer's problem too.
New CVEs, malicious packages and attacks on AI tools come out every week. The team always followed the big ones. But many threats never become big news, and some appear weeks before a CVE exists. For a five-person team, finding these by hand every week is not realistic.
“We always followed the big security news. But many threats never become big news, or they appear weeks before a CVE. InfraStack finds these for us and tells us if they matter.”
Why InfraStack
Outplane didn't need another dashboard or more alerts. It needed someone to watch the news and answer one simple question: does this new threat affect us, yes or no?
InfraStack gives this answer and shows the evidence behind it. It is read-only and it needs nothing on Outplane's servers, so it was an easy decision.
Getting started in less than 5 minutes
The setup took less than 5 minutes. Now all findings come to the team's Slack. There is no new tool to open. When InfraStack needs more information, it asks a question in Slack.
What InfraStack found
In 3 months, InfraStack checked more than 19,700 new threats against the Outplane stack as they came in: 1,882 exploited in the wild, 3,843 critical, 1,536 malicious packages and 112 breach and attack campaigns, and judged the ones that matched. The findings came from three places.
Partners: security issues in the services and vendors Outplane works with.
Outplane's own stack: vulnerabilities in .NET and React, the frameworks behind the Outplane API and console.
Customers: threats in the software that customers run on Outplane.
“InfraStack doesn't send me more alerts. It tells me which ones are about us. For a team that runs other people's code, this is the most important thing.”
The results
Visibility: more than 19,700 new threats checked against the stack in 3 months, including early warnings that were not big news yet.
Time: doing the same work by hand would take more than 5 hours every week. Today it takes a few minutes in Slack.
Coverage: a five-person team now covers partners, its own stack and its customers' apps, without a security engineer.
What’s next
Next, Outplane wants to use InfraStack for the infrastructure layer between the platform and its customers, so threats in this shared layer are checked too.