TechPrufer
Sign inGet started

Blogs›Shopify›Internal Security Tooling and Automation

Internal Security Tooling and Automation

Internal Security Tooling and Automation

1
posts
2022

Shopify has developed Hubble, an internal tool designed to encapsulate and extend various security tools, providing a unified interface for IT staff to manage inventory, device management, and security. It standardizes data from multiple systems, offers granular access control, and centralizes auditing for incident response. For end-users, Hubble provides device health and compliance information with actionable steps for remediation. It also serves as a single source of truth for security data, enabling other teams to build automations and security processes more easily. The development of Hubble highlights the value of cross-functional collaboration and investment in proactive security solutions.

2022

Hubble: Our Tool for Encapsulating and Extending Security Tools - Shopify

10/21/2022

This post introduces Hubble, an internal tool developed by Shopify's Trust team to address the challenges of managing and securing a large, distributed fleet of devices. Hubble encapsulates and extends common security tools, providing a unified interface for IT staff and end-users. For IT, it offers a single pane of glass for inventory, device management, and security, ingesting and standardizing data from various systems and centralizing access auditing. For end-users, it provides device health and compliance information with actionable remediation steps. The tool aims to reduce manual toil, mitigate shadow IT risks, and foster a culture of ownership and proactivity. The post also discusses two key lessons learned: the importance of encapsulation leading to partnerships and the value of fighting for investment in such internal tools.