CSE: QSE

QAuth · Customer deployments

QAuth case studies

Twenty deployments across fifteen industries.

Before it joined QSE and became QAuth, the platform was CloudCodes. These are its published customer deployments, summarised from the original case studies. All 20 secured G Suite, which is now Google Workspace.

Deployments
20
Published by CloudCodes, now QAuth
Industries
15
From aviation to pharmaceuticals
Used IP restriction
13
The most-used control, in 13 of 20
Fewer helpdesk tickets
30%
After self-service password reset, at two customers (a third saw 20–30%)

What they switched on

The controls customers reached for first.

Most deployments started with a few access and identity controls rather than everything at once. Each control links to an explanation of what it does.

Case studies

The challenge, the controls and the result.

Every customer moved to G Suite for collaboration and then found it too easy to reach company data from anywhere, on anything. Here's what each one changed.

Aviation

A low-cost airline working across time zones

Middle East & North Africa · G Suite

ChallengeCustomer data had to stay protected while teams in different countries and time zones handed work to each other around the clock. IT was losing hours troubleshooting access and security.

DeployedSingle sign-on gave staff one set of credentials for the whole suite, a shared login let several people work from one account during hand-overs, and two-factor authentication kept unauthorised users out. The set-up was customised with the airline during trials.

  • Single sign-on
  • Shared login
  • Two-factor authentication

Healthcare

A behavioural-health technology company

North America · G Suite

ChallengeStaff could reach confidential health data from any device, managed or not. The company wanted only assigned machines to work in its offices.

DeployedA device restriction policy binds each user to specific machines by MAC address, protecting data on managed and unmanaged devices in real time.

  • Device restriction

Education

A high school that wanted its own sign-in page

G Suite · Active Directory

ChallengeG Suite showed students and staff the same sign-in page as personal Gmail, and the school wanted its own branding there. It also wanted one set of credentials for school email and Windows.

DeployedA custom login page with the school’s name, logo and web address across G Suite, alongside its existing Microsoft Active Directory integration, so the same credentials work for email and Windows.

  • Custom login page
  • Active Directory

Energy

A power-quality equipment manufacturer

Asia · G Suite, Zoho CRM, Zoho Books

ChallengeEmployees reached company data from many devices and locations, and constantly changing IP addresses made it hard to protect proprietary design information.

DeployedIP restriction limits G Suite access to predefined addresses and blocks it from unknown ones.

  • IP restriction

Finance

A financial-services start-up

Asia · G Suite

ChallengeStaff had open access from any device and used personal Gmail at work, leaving sensitive financial data exposed.

DeployedIP restriction to whitelisted networks, browser restriction and a personal Gmail block, keeping out sign-in attempts from outside the organisation without giving up what G Suite offered.

  • IP restriction
  • Browser restriction
  • Personal Gmail block

Trading

An investment advisory firm

Asia · G Suite

ChallengeAfter more than 20 years advising on equities, fixed income and mutual funds, the firm wanted staff off personal Gmail on the office network and company mailboxes closed outside it.

DeployedIP restriction and a personal Gmail block, tested on managed and unmanaged devices before rollout.

  • IP restriction
  • Personal Gmail block

Pharmaceuticals

A medicines manufacturer founded in 1973

Asia · G Suite

ChallengeStaff used personal Gmail in the office and weak passwords. The company wanted personal Gmail blocked on its network, company mail closed outside it, and stronger passwords.

DeployedIP restriction, a personal Gmail block and an enforced password policy.

  • IP restriction
  • Personal Gmail block
  • Password policy

Education

A university with several campuses

India · G Suite · Active Directory

ChallengeStudents and staff signed in from many devices, including off campus, and the university wanted its own branding on the G Suite sign-in page.

DeployedA custom login page with the university’s name, logo and web address across G Suite, without changing its Microsoft Active Directory integration.

  • Custom login page
  • Active Directory

KPO

A medical-billing and insurance services firm

Asia · G Suite

ChallengeStaff working on US medical billing could reach confidential data from any device, even outside the office. The firm wanted sign-in from the office network only.

DeployedIP restriction confines sign-in to the office network.

  • IP restriction

Healthcare

A healthcare company moving staff to G Suite

G Suite

ChallengeWithout device controls, staff could open company email on any device, including unmanaged ones, which held up the move to a cloud productivity suite.

DeployedDevice restriction binds users to specific devices by MAC address, protecting data from unmanaged devices in real time.

  • Device restriction

Telecom

A telecom systems integrator

Asia · G Suite

ChallengeUsers went straight into their mailboxes with no restrictions. The company wanted them to land on its intranet portal first.

DeployedIP restriction, a password policy through identity management, and sign-in add-ons.

  • IP restriction
  • Password policy
  • Sign-in add-ons

Supply chain

A supply-chain solutions company

Asia · G Suite

ChallengeMore data, more users and access from any device raised the risk of data leaving the company. It also wanted its own brand on the sign-in page.

DeployedA custom login page, and IP restriction that blocks access from outside the office.

  • Custom login page
  • IP restriction

Ecommerce

An online and TV shopping retailer

Asia · G Suite

ChallengeStaff used business and personal Gmail side by side on the office network, and password resets were piling up at the helpdesk.

DeployedPassword policies with 30-day expiry, self-service password reset, IP restriction, and a consumer Gmail block that keeps company email working, applied per user or OU.

ResultHelpdesk tickets down by around 20–30%.

  • Password policy
  • Self-service reset
  • IP restriction
  • Personal Gmail block

Logistics

A moving, transport and storage company

Asia · G Suite

ChallengeSome employees shared confidential data over personal Gmail, and earlier attempts to block personal Gmail had also disrupted business email.

DeployedA personal Gmail block that leaves business email untouched, and IP restriction against access from unknown addresses outside the office.

  • Personal Gmail block
  • IP restriction

Automotive

A motorcycle and scooter manufacturer

Asia · G Suite

ChallengeIT couldn’t restrict who reached company data or tell legitimate users from others, and people went a long time without changing their passwords.

DeployedIP restriction to the office’s addresses, with exceptions IT defined, plus password complexity, self-service reset and forgotten-password policies.

ResultHelpdesk tickets down 30%.

  • IP restriction
  • Password policy
  • Self-service reset

Education

A business school with several campuses

Asia · G Suite · Active Directory

ChallengeThe school wanted one recognisable brand across G Suite for students, faculty and applicants, while keeping its Active Directory set-up.

DeployedA custom login page with the school’s name, logo and web address alongside the existing AD integration, and IP restriction policies applied per user, group or department.

  • Custom login page
  • Active Directory
  • IP restriction

Manufacturing

A listed manufacturer serving the polymer industry

Asia · G Suite

ChallengeCompany data could be reached from anywhere with just a password, so one leaked password could expose it. IT wanted granular control and a way to monitor and report unauthorised activity.

DeployedMulti-factor authentication through identity management, and access controls that restrict access from outside the organisation’s perimeter.

  • Multi-factor authentication
  • Access control

IT services

A background-screening and verification provider

Hong Kong · G Suite

ChallengeIT couldn’t tell authorised from unauthorised access across unrecognised machines, untrusted devices, unmanaged IPs and browsers. It also wanted personal Gmail blocked and a sign-in experience that reflected the company.

DeployedIP, device and browser restriction per user and OU, a personal Gmail block, and branded login and landing pages with announcements and user agreements, all from one console.

  • IP restriction
  • Device restriction
  • Browser restriction
  • Personal Gmail block
  • Sign-in add-ons

Finance

A stock-broking and wealth-management firm

Asia · G Suite

ChallengeAccess to company data from any device, anywhere, had become the firm’s biggest data-breach concern, and its network-level security couldn’t cover the cloud.

DeployedAfter technical due diligence, the firm added CloudCodes as a security layer on top of G Suite to block unauthorised access, without changing how G Suite was managed.

  • Access control

Manufacturing

Swastik TechnoPack

India · G Suite

ChallengeThe industrial-machinery maker found that access from anywhere, on any device, would also let a disgruntled employee leak company data.

DeployedIP restriction to the office, with controlled access for remote staff, time restriction, 45-day password expiry, self-service password reset and a custom login page.

ResultHelpdesk tickets down 30%.

  • IP restriction
  • Time restriction
  • Password policy
  • Self-service reset
  • Custom login page

Summarised from the case studies CloudCodes published before it joined QSE Corp. Customers are anonymised as they were in the originals, except Swastik TechnoPack, which was named. Product names are as they were at the time: G Suite is now Google Workspace, and CloudCodes is now QAuth.

In their words

Security on top of G Suite, without the overhead.

Swastik TechnoPack’s rollout was led by its Director of Projects. IP restriction keeps access to company data within the office, with controlled access for people working remotely.

“CloudCodes for G Suite allowed us to add the layer of cloud security on top of G Suite without any big change in the management effort.”
Hiral Pancholi · Director of Projects, Swastik TechnoPack · on CloudCodes, now QAuth

Get started

Start with one control. Add the rest when you need them.

Most of these customers began with IP restriction or a personal Gmail block. The QAuth team will help you pick yours.