How HackerRank Streamlined Security Due Diligence and Regained Engineering Time with Sprinto
HackerRank is the de facto choice for finding and recruiting technical talent. Companies across the world, including large-scale enterprises like Adobe, Atlassian, and Zynga, rely on HackerRank’s platform to run full-stack skill assessments when hiring developers.
– Harishankaran K
Co-founder and CTO, HackerRank
– Harishankaran K
Co-founder and CTO, HackerRank
Einführung
HackerRank works with large companies and major institutions including banks, security due diligence is a standard part of every enterprise engagement. Requests to complete security questionnaires were a recurring ask, and the process of responding to them was long, drawn-out, and time-consuming, cutting directly into the engineering team’s bandwidth.
As Harishankaran K, Co-founder and CTO, put it: “Anytime I use engineers for answering security questions, I take the time they could be using to build the actual product or make features better for our customers.” HackerRank needed a path to enterprise-grade proof of security readiness that would not place ongoing weight on its technical team.
Das Problem
HackerRank needed a solution that could sufficiently offload the security questionnaire process from its engineering team. A SOC 2 report, by design, spells out a company’s security posture and proves enterprise readiness, which would make the process of responding to security questionnaires faster and, in some cases, redundant.
As Harishankaran K, Co-founder and CTO, recalls: “There were times where a customer would outright say that we could either send them a SOC2 report or fill out an Excel sheet with security questions.
It became evidently clear that a SOC2 report would cut down the time we spent dishing out details of the health of our infrastructure and provide indisputable proof of readiness.” HackerRank sought a partner who could help achieve SOC 2 compliance and generate a Type 1 report without placing ongoing demands on the engineering team.
The goal was to establish a credible, documented security posture that could travel with the sales process and satisfy enterprise customers without requiring engineers to repeatedly explain infrastructure health from scratch.
Die Lösung
HackerRank chose Sprinto to organize and orchestrate a SOC 2 compliance program without trading off its teams’ priorities. HackerRank integrated Sprinto’s platform with its systems and infrastructure to run automated checks on key SOC 2 controls mapped to three major Trust Service Criteria (TSCs). Following Sprinto’s guided implementation plan kept the process manageable for a team new to SOC 2.
As Harishankaran noted: “We didn’t know a lot about SOC2 but it was easy to follow Sprinto’s guided implementation plan. A bi-weekly call of 30 minutes is all I ended up spending on my part.” On the people side, HackerRank made security training modules available to its 300+ employees directly through Sprinto’s Security Training module, with adherence tracked and measured inside a central dashboard. HackerRank also used Sprinto’s Continuous Monitoring module to keep critical infrastructure under ongoing observation throughout the compliance period, ensuring that controls remained active and measurable at all times.
Harishankaran described the experience as: “It’s like having a member in your team who project manages the whole process.”
Auswirkungen
HackerRank achieved compliance readiness in a matter of weeks and received its SOC 2 Type 1 report shortly thereafter. A summary of this report was later produced and made available to the sales team. “Our GTM team was very happy,” remembers Harishankaran. This SOC2 report has also been added to the HackerRank platform for its customers to download and refer to.
In addition to maintaining security compliance, Sprinto also acts as an observability agent for HackerRank. Because Sprinto’s platform monitors systems continuously, it is able to detect new vulnerabilities in HackerRank’s critical infrastructure, like GitHub, alert admins to the event, and prompt remediation to sustain compliance. “That kind of push and visibility is incredibly helpful,” he exclaims.
Besides the ensuing agility, Harishankaran has also observed an improvement in his degree of awareness of HackerRank’s security posture since using Sprinto. “As we grow and evolve, keeping up with the maturity becomes important,” he notes. “We are now able to manage security from one place. But over and above this, Sprinto helps us ensure trust in the systems we have in place.”
The impact extends to engineering efficiency as well. “While the onus is still on the teams and employees to complete their tasks, since using Sprinto, our engineering teams are spending as much as 20% less time looking for problems,” said Harishankaran. “The platform automatically alerts us when something needs to be done, where we need to look, and what will take us to the 100% compliance mark.”
Haben Sie Fragen? Sprechen Sie mit unseren Experten!
Technical hiring & skills assessment
300+
USA
