Securing the Cloud Behind Millions of Viewers

SBSi is the digital platform subsidiary of SBS, responsible for developing and operating streaming services that handle massive traffic during major events like the Olympics and World Cup. As media consumption shifts to digital and cloud-native architectures become the norm, SBSi's infrastructure has grown increasingly complex. The company operates multiple cloud environments to support live streaming, VOD delivery, advertising platforms, and news services. However, this cloud-first evolution meant credentials for various cloud platforms were scattered across GitLab repositories, documentation, and configuration files. For a media company where service disruption during a live broadcast could impact millions of viewers and damage brand reputation, securing these credentials was essential.

SBSi deployed Cremit to establish credential visibility across their GitLab environment. As the digital platform arm of SBS responsible for building and operating large-scale streaming services for events like the Olympics and World Cup, protecting cloud credentials is mission-critical. The security team connected GitLab to Cremit, enabling continuous monitoring of repositories where developers work on SBS play, Gorilla, and other flagship applications. Cremit identified various cloud credentials scattered across the codebase, allowing the team to secure them before they could be exploited.

The deployment revealed multiple cloud credentials that had accumulated across SBSi's repositories over years of rapid development. As media infrastructure increasingly moves to the cloud — from live streaming to content delivery to data analytics — the attack surface expands with every new service integration. Cremit provided the visibility needed to manage this complexity, identifying credentials for various cloud platforms in a single scan. The security team now maintains continuous oversight of their GitLab environment, ensuring that the cloud-native architecture powering millions of concurrent viewers remains protected.