Wix’s layered security strategy to discover & protect sensitive data
summary
Wix describes a production system that scans terabytes daily (30 PB ingested per day, 95,000 deploys/day, 240M users) by feeding databases and object stores into Amazon Macie via DMS/Glue and custom JSON/Parquet exports, then enriches findings in an internal risk platform Harpy/HarPii. Findings flow to Athena/QuickSight, EventBridge→Lambda/Step Functions, Security Lake and SIEM, trigger Slack/Jira alerts and tags, and use scan-cost predictions and sampling to balance coverage, cost, and automated remediation.
AI-written summary · about
chapters (8)
- 0:00Introduction and challenges
- 1:50Data classification scope
- 6:11Amazon Macie features
- 11:14Responding to findings
- 17:42Advanced data sourcing
- 20:07The Wix security story
- 30:41Implementing HarPii
- 41:04Future goals and summary
related talks
28mBuilding cloud security programs
40mLog Story Short: Chopping Through Forests Of Data
19mShielding innovation: Safeguarding cloud and AI development
46mBig Data Intelligence
33mFrom Chaos to Calm: Vulnerability Management for a Dynamic, Sprawling Technology Estate
26mSecuring Multi-Cluster Cassandra and GenAI Deployments
28mMaximizing The Impact Of AppSec with Shift Left And AI
27mSecuring Applications and Managing WAFs at a large scale