The Challenge
Renew operates in the real estate industry, where protecting sensitive data is a baseline requirement for working with enterprise partners. While the company was progressing toward SOC 2 using a GRC tool, CTO Jason Byck realized that passing an audit didn’t necessarily mean the platform was actually secure.
They ran into several issues:
- A cobbled-together stack: Security work relied on a mix of disconnected SaaS tools and manual processes. With no single source of truth, it was difficult to understand overall risk or what needed attention.
- Operational overhead: Monitoring multiple tools and manually collecting evidence took up too much time for a small startup team already balancing product delivery and customer needs. The manual effort required to monitor various tools and collect evidence was taking too much time for a small startup team.
- Anxiety over blind spots: Even after passing audits, the team had a lingering sense that vulnerabilities were slipping through because their tools weren’t providing a complete view of the environment.




