We secure Wolt
We protect Wolt’s existing and future business by partnering with our teams on security, privacy and safety. We constantly search for the most impactful opportunities to shift security left in our product development processes.
For us, security, privacy and safety are strategic elements in our global Wolt business to ensure we can continue to operate and scale.
We craft excellence
A great product makes life better for people who use it. That’s been our mindset since day one.
Our focus areas
We work with developer teams and product owners to ensure the security of our products and services. This is done by performing design reviews, threat modeling sessions with developers, static code analysis and bespoke review. We also work closely with Platform and DevOps teams to ensure the security of our cloud infrastructure as well as understanding what can enable developers to follow the secure path by default when it comes deploying and maintaining their services.
Our GRC function is responsible for creating and maintaining a framework based on which security, privacy and safety are planned. We keep track of our current state and sets goals for future states, understanding and keeping track of the risks facing Wolt, and anticipating and managing Wolt’s compliance requirements and legal obligations.
We take ownership of protecting life safety and assets globally at Wolt. The team helps to create scalable solutions and processes that complement business operations by reducing risks and incidents while enabling business to operate at full speed.
Privacy is considered a key product aspect at Wolt. Privacy acts as a glue as it requires security, and enables physical safety. We work in close collaboration with our Legal Team and Data Protection Officer, protecting personal data both technically and through regulatory compliance.
How we think about security
We act as enablers.
Security and privacy should be easy and built into the user experience. We’re not here to push through policies or enforce security controls for their own sake. We’re here to find the sweet spot where the needs of our users, the business and security meet.
As an example, we integrated access control to our Wolt Market stores into our employees’ mobile phones. Now Wolt Market employees can easily use their mobile phone to get into the stores, removing the hassle of physical keys or access tokens. This provides a user-friendly, safe and scalable solution for both our employees and the company as we scale our Wolt Market operations.
We shift left.
As Wolt goes through rapid growth, it’s our priority to ensure our approaches scale up. We must shift left, embedding security and privacy as early in our product development as possible.
We invest in onboarding, creating blueprints and runbooks and appropriate tooling. We always look to automate what we can and build scalable solutions to support our growth.
We have a strategic approach.
Security, privacy and safety aren’t just technical or regulatory issues, they’re a key part of our business strategy. It’s important we look at these themes holistically and together, and focus on what actually matters. We always look to identify the most impactful solutions that bring the most impact for Wolt and our employees.
We work things out together.
We trust our teams to do the right thing and genuinely want to help them out. If something goes wrong we ensure a blame-free culture and work things out as a team. We’re in the same boat here and learn from mistakes together.
Our security team is built on mutual trust. Team members, as the experts of their areas, decide what they work on. Most of our solutions are new and novel, so while we trust each other to focus on the right things, we also support one another when needed.
How we get there
Mitigate existential threats
Above all, we prioritize protecting Wolt from anything that might put us out of business.
Integrate security in the product development flow
From automated DevSecOps tooling to Privacy Impact Assessments, all activities must flow and fit effortlessly into product development.
Be prepared to prove it
We must be able to confidently show we’re doing a good job – both for legal compliance and for the peace of mind of our customers and partners.
We build beautiful products, the Wolt way
We build at scale, but stay small at heart. And together, we're building the delivery of (almost) everything.
Hear it from our team
“Working in the Security team is great because we have a bird’s eye view of everything going on. There’s never a dull day at Wolt.”
— Mikko, Information Security Specialist
We get together, every year
Take a peek at Product Week; an annual event where all our colleagues from Engineering, Design, Product Management, Security, and Analytics and Data teams gather together in our HQ to collaborate, mingle and have fun.
More on our tech blog
Tech
How our engineering teams prepare for scalability events at Wolt
Ibbad Hafeez
Tech
On-Call at Scale: How we do on-call engineering at Wolt
Ibbad Hafeez, SRE Competence Lead & Helena Anttila, Head of Tech Support
Tech
How we manage incidents at Wolt
Tech
Behind the scenes of Wolt Hackathon 2023
Leandro Storoli dos Santos
Design
Launching and revamping one of Wolt’s most beloved features
Mia Lavanti
Tech
How to develop quality products
Untamo Hirvonen, QA Competence Lead at Wolt
Tech
How we do technical interviews at Wolt
Richard Van Camp
Tech
Wolt loves open-source software
Fredrik Sannholm