Introduction
An Identity Technology Company (Identity Co.) is the primary contributor to a major open source project, building a global identity and financial network designed to verify humanness in a privacy-preserving way. Security is an integral part of Identity Co.’s mission as a provider of identity verification products. With this focus, Identity Co. needed a way to level up their cloud infrastructure configuration practices—without slowing down developers or burdening platform teams with operational bottlenecks.
To address these challenges, Identity Co. adopted Resourcely, a configuration platform designed to standardize infrastructure and enforce security best practices while enabling developers to move fast.
Challenges Identity Co. Faced
As Identity Co. has scaled, its security team faced a mounting challenge: maintaining their already strong cloud security practices without becoming a blocker to developer velocity. As a technology company, developer speed is of paramount importance to the Identity Co. team. With expansion and growth came a greater focus on the time and effort spent on securing the company’s infrastructure.
Their leader of cloud security, enterprise security, and detection and response inherited a stack built for the scale that Identity Co. started at..
"When I started, I inherited a CSM that had minimum risk-based context on how it prioritized or handled vulnerabilities," he explained. Identity Co. was manually reviewing every issue, leading to wasted time and operational friction.
Identity Co. wanted to shift its security posture left — embedding security and compliance earlier in the development process.
"It really comes down to respecting our developers’ time and allowing us to get out of their way and be enablers for them to further develop the project and move as fast as they physically can," the Security Leader said.
With over 100 developers pushing changes daily, Identity Co. needed a solution that could enforce security and compliance without forcing security teams into endless triage meetings or slowing down the engineering pipeline.
Why Identity Co. Adopted Resourcely
Identity Co. had already embraced infrastructure as code (IaC), managing their cloud infrastructure through Terraform and AWS Cloud Development Kit (CDK). When the Security Leader joined, he also brought on a world-class CNAPP to replace their legacy posture management tooling. But as the company grew, the vulnerability treadmill became onerous: anchored by manual security review and ad-hoc governance slowing down operations.
Recognizing the need for a systematic, automated approach, Identity Co. brought in Resourcely to:
- Cut through the noise by only blocking meaningful security risks
- Shift security left by embedding best practices directly into developer workflows
- Enable self-service infrastructure for engineers, reducing reliance on security teams during the development process
The Security Leader emphasizes the importance of Resourcely’s Guardrails and Blueprints, which provide predefined, secure infrastructure patterns and rules for developers to use without needing manual validation.
"We’re not having this continuous chase, fixing the same vulnerabilities for years and years. As we fix issues, we can use what we learned to make Guardrails and Blueprints that engineering teams can rely on," he noted.
Identity Co’s adoption of Resourcely aligns with its commitment to automation and efficiency.
"We run a very lean team where automation is king, and we don’t need to throw people at technology problems. That mindset is echoed from the top down—everyone here thinks that way."
Value and Outcome
By implementing Resourcely, Identity Co. eliminated security bottlenecks while ensuring consistent, secure cloud infrastructure. The platform allowed them to:
✅ Reduced security triage meetings and manual reviews
✅ Improved developer velocity by embedding security into Terraform workflows
✅ Ensured compliance without blocking innovation
One of the biggest benefits? Empowering developers to move faster while maintaining security standards.
"You really go from being kind of a blocker to an enabler—you're no longer looking for a needle in a haystack. I don’t even need to get in your way because we have an agreement. I trust you, you’re very competent engineers, and I want to allow you to move as fast as possible while staying secure.” the Security Leader explained.
Instead of endless security reviews, developers now work within predefined, approved configurations, ensuring infrastructure is deployed securely by default.
Conclusion
For Identity Co., Resourcely has been a game-changer. By integrating Guardrails and Blueprints into their workflow, the security team has successfully shifted from firefighting vulnerabilities to preventing them from happening in the first place.
As Identity Co. continues to grow and expand its global identity network, Resourcely remains a crucial part of its cloud security and infrastructure management strategy—allowing security teams to focus on high-impact work while giving developers the autonomy to build quickly and safely.
"I don’t want myself or my engineers looking at the same patterns over and over again, just comparing a spreadsheet to code and going, ‘Yep, this looks good, check box.’ With Resourcely, we’re working on higher value projects and making our infrastructure secure-by-default."
With Resourcely, security and speed at Identity Co. are no longer at odds—they work together.