Security

Security
Location
Search

We secure Wolt

We protect Wolt’s existing and future business by partnering with our teams on security, privacy and safety. We constantly search for the most impactful opportunities to shift security left in our product development processes. 

For us, security, privacy and safety are strategic elements in our global Wolt business to ensure we can continue to operate and scale.

Security Yuho - transparent

Our focus areas

Product Security

We work with developer teams and product owners to ensure the security of our products and services. This is done by performing design reviews, threat modeling sessions with developers, static code analysis and bespoke review. We also work closely with Platform and DevOps teams to ensure the security of our cloud infrastructure as well as understanding what can enable developers to follow the secure path by default when it comes deploying and maintaining their services.

Governance, risk management, and compliance (GRC)

Our GRC function is responsible for creating and maintaining a framework based on which security, privacy and safety are planned. We keep track of our current state and sets goals for future states, understanding and keeping track of the risks facing Wolt, and anticipating and managing Wolt’s compliance requirements and legal obligations.

Physical Security and Safety

We take ownership of protecting life safety and assets globally at Wolt. The team helps to create scalable solutions and processes that complement business operations by reducing risks and incidents while enabling business to operate at full speed.

Privacy

Privacy is considered a key product aspect at Wolt. Privacy acts as a glue as it requires security, and enables physical safety. We work in close collaboration with our Legal Team and Data Protection Officer, protecting personal data both technically and through regulatory compliance.

How we think about security

We act as enablers.

Security and privacy should be easy and built into the user experience. We’re not here to push through policies or enforce security controls for their own sake. We’re here to find the sweet spot where the needs of our users, the business and security meet.

As an example, we integrated access control to our Wolt Market stores into our employees’ mobile phones. Now Wolt Market employees can easily use their mobile phone to get into the stores, removing the hassle of physical keys or access tokens. This provides a user-friendly, safe and scalable solution for both our employees and the company as we scale our Wolt Market operations.

Square: product, woman, whiteboarding, berlin

We shift left.

As Wolt goes through rapid growth, it’s our priority to ensure our approaches scale up. We must shift left, embedding security and privacy as early in our product development  as possible. 

We invest in onboarding, creating blueprints and runbooks and appropriate tooling. We always look to automate what we can and build scalable solutions to support our growth.

Square: product, working together, hackathon

We have a strategic approach.

Security, privacy and safety aren’t just technical or regulatory issues, they’re a key part of our business strategy. It’s important we look at these themes holistically and together, and focus on what actually matters. We always look to identify the most impactful solutions that bring the most impact for Wolt and our employees.

Square: product, pointing on screen

We work things out together.

We trust our teams to do the right thing and genuinely want to help them out. If something goes wrong we ensure a blame-free culture and work things out as a team. We’re in the same boat here and learn from mistakes together. 

Our security team is built on mutual trust. Team members, as the experts of their areas, decide what they work on. Most of our solutions are new and novel, so while we trust each other to focus on the right things, we also support one another when needed.

Square: product week, team, working together

How we get there

Emoji muscle 0004.png

Mitigate existential threats

Above all, we prioritize protecting Wolt from anything that might put us out of business.

Emoji Rocket 0002.png

Integrate security in the product development flow

 From automated DevSecOps tooling to Privacy Impact Assessments, all activities must flow and fit effortlessly into product development.

Emoji Heart blue 0004.png

Be prepared to prove it

We must be able to confidently show we’re doing a good job – both for legal compliance and for the peace of mind of our customers and partners.

We build beautiful products, the Wolt way

We build at scale, but stay small at heart. And together, we're building the delivery of (almost) everything.

Hear it from our team

“Working in the Security team is great because we have a bird’s eye view of everything going on. There’s never a dull day at Wolt.”

— Mikko, Information Security Specialist

Product: Mikko, Security
Product: woman working on laptop
Product: yuho on desk
Product: whiteboard, woman
Product: Coding on computer
Product: mariana, stage, presentation, product week
Product: berlin office, working together, office shot
Product: hackathon, engineering, working together, group
Product: whiteboard, two people, berlin
Product: Hackathon 2022 - kicking off
Product: product week
Product: product week, presentation, jacopo, data
Product: engineers, working together, hackathon
Product: product week, niilo, vincent, on stage, presentation
Product: woman working on laptop
Product: yuho on desk
Product: whiteboard, woman
Product: Coding on computer
Product: mariana, stage, presentation, product week
Product: berlin office, working together, office shot
Product: hackathon, engineering, working together, group
Product: whiteboard, two people, berlin
Product: Hackathon 2022 - kicking off
Product: product week
Product: product week, presentation, jacopo, data
Product: engineers, working together, hackathon
Product: product week, niilo, vincent, on stage, presentation

We get together, every year

Take a peek at Product Week; an annual event where all our colleagues from Engineering, Design, Product Management, Security, and Analytics and Data teams gather together in our HQ to collaborate, mingle and have fun.