01The challenge
Thousands of violations a day. One central team to approve them.
Trend Micro Conformity flagged thousands of violations daily across 800+ accounts. Each one needed review, a ticket, coordination and verification, and every decision went through a small central security team.
Posture at scaleIAM, encryption, network and Kubernetes issues across 800+ accounts in three clouds.
A central bottleneckDistributed infrastructure teams waited on central security for every decision.
Many clients, many frameworksHIPAA, PCI-DSS and SOC 2 clients each needed their own evidence.
Routine fixes by handEven simple fixes needed investigation, a ticket, approval and verification.
02The approach
Route every fix to the team that owns it.
Instead of sending everything through central security, autobotAI identifies the infrastructure team responsible for each violation (from resource metadata, client association and ownership), and sends them the fix with context they can act on.
Fig. 1Decentralised approval routing
Violationfrom Conformity
Enrichowner · client · framework
Summarisein the client’s compliance terms
Owning team approvesin Slack, with the proposed fix
Fix & auditapplied, verified, logged
Fig. 2Who approves what
Low riskRuns inside guardrails, with audit loggingenable logging · rotate unused keys
Medium riskOwning infrastructure team approves in SlackAI-generated context + proposed fix
High riskSecurity team reviews and approvesinfrastructure-wide changes
Client-criticalClient stakeholder brought incoordinated with the client
Compliance-criticalMulti-step approval, fully documentedfull audit trail
03The results
Faster fixes, distributed ownership.
Days to hoursPosture violations that sat for days are fixed within hours.
One view across 800+ accountsAWS, Azure and Google Cloud, with client and compliance context.
Ownership where it belongsInfrastructure teams own the security posture of their client environments.
Continuous audit readinessEvidence generated with compliance context instead of periodic scrambles.
Better decisionsAI summaries let teams without deep security expertise decide with confidence.
Less toil at scaleLean teams sustain 800+ accounts and focus on client advisory work.
What they learned
LESSON 01Distributed ownership is fasterRouting approvals to the teams responsible for each environment speeds decisions and builds accountability.
LESSON 02Context beats generic guidanceClient- and framework-specific summaries lead to better remediation decisions.
LESSON 03Client context is metadataAccurate ownership and client associations make client-aware automation possible.