Global social media behemoth TikTok announced last week OnDefend will further enhance its security offerings as the Jacksonville-based company will become an independent security inspector.
This new collaboration builds on TikTok U.S. Data Security's ongoing partnership with Oracle. In May 2022, TikTok created a new organization called TikTok U.S. Data Security as part of its ongoing Project Texas Plan.
This special purpose subsidiary is staffed by U.S.-based employees (with some exceptions in the U.K. and Australia to provide global coverage). TikTok U.S. Data Security controls access to protected U.S. user data, content recommendation and moderation systems in the secure Oracle Cloud. This structure brings heightened focus and governance to TikTok’s operations in the U.S., including data protection policies and content assurance protocols to keep U.S. users and their data safe and ensure users have an authentic experience on TikTok.
Expanding on this established focus, HaystackID and OnDefend with additional support from Mandiant Consulting will serve as the ISIs for TikTok's domestic clients. This collaboration is designed to ensure the security and integrity of the TikTok app, its source code, user information and the U.S. platform as a whole, highlighting TikTok commitment to meeting stringent cybersecurity standards.
DOWNLOAD the free JBJ app for breaking news alerts on your phone
HaystackID is a specialized data services company solving business data challenges related to legal, compliance, regulatory and cyber events. OnDefend is a cybersecurity service provider helping organizations prepare for and defend against real-world threats. Mandiant Consulting is a leader in threat intelligence.
“Our advanced security testing team, in conjunction with our proprietary Breach and Attack Simulation platform, BlindSPOT, will play a crucial role in identifying and addressing vulnerabilities within the TikTok application and network infrastructure," OnDefend CEO Chris Freedman said in a statement. "Moreover, our rigorous application and network penetration testing standards aim to ensure that the platform’s security strictly complies with national and global cybersecurity standards, identifying potential vulnerabilities while reinforcing trust and safety in the digital ecosystem.”
The ISIs will identify potential security risks to U.S. users through technical security testing and validation of the TikTok U.S. platform. This will be a continuous initiative, not a point in time assessment, as TikTok's ability to deliver a seamless experience to its users is achieved through a sophisticated architecture involving hundreds of thousands of microservices.
"Through Project Texas, TikTok USDS is already well ahead of any peer companies in terms of how we secure users’ data and by providing unparalleled transparency by making our source code available to a third-party for review," said Andy Bonillo, head of TikTok-U.S. Data Security. "Keeping our users' data safe involves constantly innovating and looking around corners for new threats. The partnership we're announcing today will further our ability to anticipate and prevent emerging and sophisticated cybersecurity threats."
These partnerships are an effort to stave off scrutiny over TikTok's alleged data management practices. The fight to ban TikTok in America centers on concerns over data privacy and national security.
Critics argue that TikTok, owned by Chinese company ByteDance, could share user data with the Chinese government, posing a security threat. In response, the Trump administration sought to ban the app in 2020, leading to legal challenges and attempts to force ByteDance to sell its U.S. operations. The Biden administration has continued to scrutinize TikTok, pushing for stricter regulations and transparency. Amidst ongoing debates, TikTok remains popular, but its future in the U.S. remains uncertain as lawmakers weigh privacy and security concerns.
Sign up here for the Business Journal’s free morning and afternoon daily newsletters to receive the latest business news impacting the First Coast, and download our free app to get breaking news alerts on your phone.
