In 2021, Kolide went through the SOC 2 Type 1 audit, and they found out just how challenging it can be to prove compliance to a third-party auditor. They also learned firsthand something their customers had been telling them for a while: that they couldn’t have gotten their SOC certification without using their own product.

That product is Kolide, an endpoint security solution for Mac, Windows, and Linux devices. Kolide gives IT admins a single dashboard, through which you can prove that your fleet has the security measures that auditors care about.

With Kolide, you can instantly see whether:

• Firewalls and screen lock are enabled
• Operating systems are up-to-date
• Password managers are installed

Kolide also provides visibility into nuanced issues that MDMs can’t address, like whether developers have unencrypted SSH keys or plaintext 2FA backup codes.

Moreover, Kolide balances this visibility with respect for user privacy and autonomy. Users can visit the Privacy Center to see what device data is being collected and why. And when Kolide detects a vulnerability on a user’s device, it reaches out via Slack to notify them of the problem and provides step-by-step instructions on how to solve it. 

Kolide has helped hundreds of customers achieve compliance–for SOC 2, ISO27001, or their own internal security goals. And they’ve done so in ways that go beyond “checking the boxes” and actually increase transparency and collaboration between IT and end users.

If you want to know how you can get compliant without compromising your values, then we want to talk to you.

Try Kolide for 14 days free; no credit card required.

Our thanks to Kolide for its support of MacStories this week.

Device security is a lot like Mount Everest: it’s tough to scale.

When you’re a small company dominated by engineers, you can keep up with fleet management with nothing more than trust and a spreadsheet. But once you start to hire marketers, designers, and the rest, the number of laptops balloons and the line between “work” and “personal” devices gets fuzzy. 

But fuzzy isn’t going to cut it. You have to prove you’ve got device security under control to close deals with customers, pass a third-party audit, and prove you’re ready for acquisition or an IPO. 

At this point, you start looking for a tool that will give you visibility across all these devices. And you have two options. 

Option one is an MDM, which acts as the puppet master for your whole fleet, forcing compliance through intrusive agents. But for all an MDM’s power, it still can’t answer your most nuanced questions. And when it comes to Linux devices? Good luck with that.

Your other option is Kolide. 

Kolide is an endpoint security solution that gives IT teams a single dashboard for all devices, regardless of their operating system.

Kolide can answer questions MDMs can’t. Questions like:

• Do you have production data being stored on devices?
• Are all your developers’ SSH keys encrypted?

• And a host of other data points you’d otherwise have to write a custom shell script to learn about.

Want to see how it works for yourself? Click here for a free trial, no credit card required, and let us show you what we’re all about.

Our thanks to Kolide for sponsoring MacStories this week.