How UpCloud leverages Intigriti for enhanced cloud security
The challenge
As a European cloud provider with global reach, UpCloud handles sensitive customer data daily and faces the constant threat of security vulnerabilities in their production environment. The company needed a layered, always-on security testing approach that could find these vulnerabilities before malicious actors.
My advice to CISOs everywhere: PTaaS with bug bounty - do consider it. I think it's the most cost effective way for you to control your security exposure.
Jukka Seppänen
CISO
The solution
UpCloud chose Intigriti as their security partner, leveraging not just traditional bug bounty programs but a comprehensive security testing suite. Key factors in their decision included Intigriti's European nature and strong researcher community relationships.
UpCloud implemented three key Intigriti services:
Bug Bounty Program: Continuous, real-world security testing with validated findings
Vulnerability Disclosure Program: Open submission portal for the broader security community
Penetration Testing as a Service (PTaaS): Annual, pay-for-impact regulatory compliance testing
Intigriti’s Penetration Testing as a Service (PTaaS) gave us the flexibility to fulfill strict regulatory requirements while still working with top-tier researchers. The combination of a results-driven bug bounty model and focused, time-boxed testing was exactly what we needed. Intigriti quickly matched us with the right experts and the findings helped us improve security where it mattered most.
Jukka Seppänen
CISO
The result
The partnership with Intigriti has strengthened UpCloud's security posture across multiple areas, including:
Enhanced internal collaboration: Validated findings lead to faster resolutions and a more motivated team who can focus on core security challenges.
Regulatory compliance: Focused penetration testing with Intigriti’s PTaaS solution helps UpCloud meet certification requirements and customer security demands while focusing resources on specific areas.
Vulnerability detection in production: The program has successfully identified and resolved security issues in live production environments.
Ensured robustness of new tools: Intigriti helps ensure the resilience of UpCloud's new Essential software tools, which provide customers with complimentary access to secure cloud development resources.
Upcloud
UpCloud is a European cloud provider with global reach, offering secure cloud infrastructure services to customers worldwide. The company is committed to providing robust, cost-effective cloud solutions while maintaining the highest security standards.
Industry
Cloud Infrastructure
Employees
150+
Customers
Global enterprises and developers
"Once you go live and you've got to go live for the customers, you still need a failsafe. You want to catch those problems yourself, or by a trusted partner, and not via a ransom letter."
Jukka Seppänen,
CISO at Upcloud