“Most of all, I have thoroughly enjoyed working with the team at Duo; they are one of the few vendors that puts as much effort into ensuring the success of the customer as the customer themselves.”
— Steve Myers, Head of Security
KAYAK wanted to secure BYOD and remote access to critical apps
Managing five different solutions to achieve this goal was too complex, costly and support-intensive
Duo Beyond allowed them to consolidate into one solution to gain visibility, control and secure remote access
As the world’s leading travel search engine, KAYAK has over 40 international sites, processing over 1.5 billion travel searches a year. To promote employee productivity and provide flexibility for their users, KAYAK allows their global workforce to work remotely using their own devices.
This presented a few challenges for KAYAK’s security team - including limited visibility into employee-owned laptops and the task of balancing remote access security and user convenience.
"We weren't satisfied with BYOD management technologies, and had no security technologies for differentiating access from KAYAK-owned and employee-owned devices," Steve Myers, KAYAK Head of Security said.
He also wanted to check the security posture of these devices, including the ability to detect out-of-date operating systems. To address these needs, he tried a combination of mobile device management (MDM), network access control, and client certificate solutions.
This proved too complex to manage and didn’t provide enough coverage while migrating to cloud applications. They also wanted a solution that provided device visibility without forcing users to install MDMs or give up control of their device policies.
Using Duo Beyond, KAYAK was able to differentiate between company and personal laptops, gain insight into the security health of every device accessing KAYAK’s applications and provide secure, convenient remote access for KAYAK employees.
“With Duo, we can clearly identify the hundreds of KAYAK-managed laptops, and differentiate them from the other personal devices that our employees are bringing into our environment. We can even track the health of these devices to make sure that operating systems and browsers are up to date,” Steve said.
KAYAK could also enforce BYOD policies that allowed access to critical third-party administrator accounts only via KAYAK-owned laptops. They allowed personal laptops to access regular accounts, as long as their operating systems and browsers were updated to the latest versions.
“We were previously trying to do this through a combination of five other products; the fact that one product can provide this level of granular access control is really awesome,” Steve said.
To minimize the necessity of using VPN to connect to internal applications, KAYAK gave their users the option to use Duo Network Gateway instead - a more convenient way to securely log into their applications remotely.
They chose a few of the most commonly used critical applications and made them accessible through Duo’s Trusted Access platform. That way, KAYAK can verify the identities of their users and check the security health of their devices before granting them remote access to their applications.
KAYAK is looking forward to deploying Duo’s secure single sign-on (SSO) solution to give their users login consistency and easy access to applications.
“If our end users can expect one consistent experience for everything, they will automatically learn to be suspicious if something looks or feels different. Our end users can help us stay secure by questioning when something doesn’t look or feel like Duo.”
KAYAK was able to reduce costs and maintenance overhead by consolidating their security needs into one solution - Duo Beyond.
“This is huge for organizations with limited IT resources as Duo has a multiplier effect, it allows one person to do the work of 10,” Steve said.
KAYAK is the world’s leading travel search engine. KAYAK searches other travel sites travelers the information they need to find the right flights, hotels, rental cars and vacation packages. The company’s website and apps also offer tools to help travelers plan and manage their trip, including Price Alerts, Price Forecasts and free itinerary management. KAYAK processes 1.5 billion annual searches for travel information and operates more than 40 international sites in 20 languages. KAYAK is an independently managed subsidiary of The Priceline Group.