Company Profile

Zapier is the leader in easy automation, helping businesses automate workflows and move data across nearly 8,000 apps. The company’s no-code automation platform is used by over 3.4 million businesses, from startups to Fortune 100 companies.

Behind the scenes, a lean detection and response team monitored security alerts to quickly identify and stop threats. Every day, the team faced unpredictable alert volumes. Each alert investigation demanded pivots across multiple systems, draining time and pushing critical projects like detection engineering, observability, and vulnerability management further behind.

Challenges

With no option to grow headcount, Zapier’s detection and response team set out to solve challenges that stretched far beyond their size:

Selection & Implementation

Zapier’s security team had seen plenty of tools that promised automation, but most didn’t deliver what they needed—a solution that could autonomously carry complex investigations to completion. 

Kuchera explains why the team found Dropzone AI appealing:

Prior to deploying Dropzone, Alana Kim, Sr. Security Incident Response Engineer at Zapier, had built a service to enrich alerts but it required a lot of ongoing effort to maintain. Dropzone AI met all the requirements of that project and more. 

The deployment was completed in two days. Dropzone integrates with Zapier’s core systems and pushes enriched investigations directly into Panther. They connected to their corporate Slack so that Dropzone can conduct AI interviews of users, when necessary.

The Zapier team appreciates Dropzone AI’s ability to learn details about the environment and business.

Benefits Realized with Dropzone AI

From 100 Investigations a Day to a Handful That Matter

Zapier’s security team once faced 50–100+ alert investigations daily, most of them turning out to be false positives. Dropzone collapsed that noise into only the handful that truly needed attention.

Minutes Instead of Afternoons

What used to take 10-15 minutes on average now takes under two minutes. Investigations arrive fully enriched and ready to act on.

No More Guesswork

Dropzone conducts thorough investigations—taking steps beyond what a human would typically complete.

Engineers Building, Not Chasing Alerts

With alert triage off their plate, Zapier’s engineers spend time engineering detections, expanding observability, and projects that improve the maturity of the security program.

Even Compliance Runs Smoother

The Governance, Risk, and Compliance (GRC) team self-serves through Dropzone’s Ask a Question feature. Audit evidence, provisioning checks, and user investigations no longer interrupt security; they’re answered instantly, without pulling analysts away from higher-value work.

Scale Security Without Adding Headcount

Dropzone acts like a 24/7 SOC analyst team, delivering consistent investigations directly into workflows, allowing Zapier to scale without hiring or outsourcing.

Key Performance Indicators (KPIs) and Results:

A Lean Security Team, Finally in Control

Zapier’s detection and response team is much more efficient and effective with Dropzone AI handling alert triage and investigation. The time savings have been apparent.‍