Introducing Slack support in Adya
June 1, 2018 | By Deepak Balakrishna
Ever since Slack was launched in August 2013, it has grown at an unprecedented rate. This growth has only accelerated in the last couple of years, from 2.7 million daily active users in 2016 to 8 million daily active users on its platform in 2018. That is a growth of 3x in just two years!
Slack is now firmly established as the de-facto enterprise messaging and collaboration platform and is getting exponentially more popular with companies who want to easily collaborate with employees, partners, customers and the public around the world.
However this ease of use also brings with it some unexpected security issues. In one recent incident, a federal contractor inadvertently shared over 100 goverment Google drives on Slack, potentially exposing sensitive federal data to external users.
Here are some other examples:
- Employees can easily share documents on Slack: These permissions are not time bound – most of the time, once set, unless an admin or the employee goes in and removes them manually, the external party continues to have access long after the work is done. Similarly, another facet of the same problem occurs when an employee makes the content publicly accessible, thus making it available to anyone with the document URL.
- External users added to an enterprise’s internal Slack channels: This can happen when an external user is temporarily added to an enterprise’s slack channel for the purpose of a short term project, for example, but is never removed. They then continue to have access to content and conversations that they should not be privy to. Hackers can also easily gain access to a company’s slack channel using the method described here – a nightmare scenario for any organization trying to protect their information from competitors and malicious users.
- Slack Applications and Data privacy: The third security risk in Slack arises from the apps that Slack users can install on their machines, that are granted access to data across different Slack channels in the enterprise. This is a massive blind spot for most enterprises and can be a huge exposure risk for their data.
Adya helps secure your enterprise against all the risks detailed above. We can monitor, manage and secure content shared in your Slack channels. We can also track the third party apps installed by your employees and alert you in real time in case of any dangerous apps or behavior.
Once Adya is connected to your Slack environment, you can:
a. Monitor any publicly shared data on your Slack channels and take actions as necessary to prevent sensitive data from leaking out.
b. Keep a close eye on external users who may have unauthorized access to your Slack channels and remove their access if needed.
c. Track all third party applications installed by users and prevent any risky apps from compromising your data.
Adya enables enterprises manage and secure data and apps on their important SaaS applications such as G Suite, Slack and others from a single console.