Case Study · Retail & E-Commerce

ODDITY & IL MAKIAGE

Permission confirmed Application Security
Industry

Online beauty & e-commerce

Engagement

Penetration testing, AppSec hardening, ongoing CISO advisory

Services

Penetration Testing, Application Security, CISO as a Service

Background

ODDITY is a consumer-tech platform built on data science, machine learning and computer vision, with flagship brands IL MAKIAGE and SpoiledChild. IL MAKIAGE alone became the fastest-growing online beauty brand in the US before expanding to the UK and Germany, with strategic operations in New York and an R&D hub in Tel Aviv.

Challenge

For a platform built on matching customers to products through data and machine learning, the priority was making sure the sites themselves stood resilient against attack: validating site credentials and confirming the maturity of the software development lifecycle (SDLC) behind a fast-moving product organization.

Scope of work

Cybecs ran penetration testing to scrutinize the integrity of ODDITY and IL MAKIAGE's online interfaces, then went deeper into application security to harden the coding backbone of the platforms directly. A customized Checkpoint Harmony implementation added another layer of defense, and Cybecs worked hands-on with the brands' CISOs (CISO as a Service) to keep security policy current with the latest standards.

Outcome

A resilient application layer validated end to end, security policy that keeps pace with a fast-shipping product team, and a partnership the CTO credits directly for letting the business keep innovating without cyber risk slowing it down.

"As the CTO of our company, I must say that our collaboration with Cybecs Professional Services has revolutionized the digital beauty industry. Their top-notch cybersecurity expertise has allowed our innovation to thrive without any worries about cyber threats."

Niv Price, CTO, ODDITY & IL MAKIAGE

Related

More case studies

Facing a similar challenge?

Let's talk about what a comparable engagement would look like for your platform.

Discuss a Similar Engagement →