Right now, “Zero Trust” is in serious danger of becoming an empty buzzword. The problem isn’t just that marketers have slapped the Zero Trust label on everything short of breakfast cereal–it’s that for all the hype, we don’t seem to be getting any safer.

At the heart of Zero Trust is a good idea, but the way most companies execute that idea is incomplete. Specifically, most security practitioners forget that device compliance is a crucial element of Zero Trust.

Think about it: your identity provider can ensure that only known devices access your company’s apps, but just because you recognize a device, doesn’t mean it’s in a secure state. A malware-infected laptop running an outdated OS can’t exactly be “trusted.” And you can’t count on MDMs to achieve total compliance. Things like unencrypted access credentials are out of their reach, not to mention Linux devices writ large.

Kolide solves the device compliance element of Zero Trust for companies that use Okta.

Our premise is simple: if an employee’s device is out of compliance, it can’t access your apps.

Kolide’s unique approach works with Okta to make device compliance part of the authentication process. If a device isn’t compliant, users can’t log in to their cloud apps until they’ve fixed the problem. And instead of creating more work for IT, Kolide provides instructions so users can get unblocked on their own.

Kolide works across your Mac, Windows, and even Linux devices, with mobile support coming soon. Our lightweight agent complements your existing tools, brings a lot of compliance issues into scope and under control, and can complete your Zero Trust picture.

To learn more and see our product in action, visit kolide.com.

Our thanks to Kolide for sponsoring MacStories this week.

Here’s an uncomfortable fact: at most companies, employees can download sensitive company data onto any device, keep it there forever, and never even know that they’re doing something wrong.

Kolide’s new report, The State of Sensitive Data, shines a light on an area of security that is often ignored, but is nevertheless a massive hole in many companies’ Zero Trust fortress.

These findings are particularly alarming given the overall state of device security. IT teams routinely struggle to enforce timely OS updates and patch management, meaning that end users are storing your most sensitive data–things like customer records, confidential IP, and plain-text access credentials–on devices that are vulnerable to attack.

This problem has gone unaddressed because until now there hasn’t been a good solution for it. MDM solutions are too blunt an instrument for dealing with sensitive data, and DLP tools are too extreme and invasive for most companies. After all, you’re not trying to ban downloads together, nor regard every download as suspicious. You’re just trying to make sure employees aren’t keeping data for longer than they need or keeping it on an unmanaged or unsecure device.

Kolide offers a more nuanced approach to setting and enforcing sensitive data policies.

Our premise is simple: if an employee’s device is out of compliance, it can’t access your apps.

Kolide lets admins run queries to detect sensitive data, flag devices that have violated policies, and enforce OS and browser updates so vulnerable devices aren’t accessing data.

Our unique approach makes device compliance part of the authentication process. If a device isn’t compliant, users can’t log in to their cloud apps until they’ve fixed the problem. But instead of creating more work for IT, Kolide provides instructions so users can get unblocked on their own.

To learn more and see our product in action, visit kolide.com.

Our thanks to Kolide for sponsoring MacStories this week.

Right now, “Zero Trust” is in serious danger of becoming an empty buzzword. The problem isn’t just that marketers have slapped the Zero Trust label on everything short of breakfast cereal–it’s that for all the hype, we don’t seem to be getting any safer.

At the heart of Zero Trust is a good idea, but the way most companies execute that idea is incomplete. Specifically, most security practitioners forget that device compliance is a crucial element of Zero Trust.

Think about it: your identity provider can ensure that only known devices access your company’s apps, but just because you recognize a device, doesn’t mean it’s in a secure state. A malware-infected laptop running an outdated OS can’t exactly be “trusted.” And you can’t count on MDMs to achieve total compliance. Things like unencrypted access credentials are out of their reach, not to mention Linux devices writ large.

Kolide solves the device compliance element of Zero Trust for companies that use Okta.

Our premise is simple: if an employee’s device is out of compliance, it can’t access your apps.

Kolide’s unique approach works with Okta to make device compliance part of the authentication process. If a device isn’t compliant, users can’t log in to their cloud apps until they’ve fixed the problem. And instead of creating more work for IT, Kolide provides instructions so users can get unblocked on their own.

Kolide works across your Mac, Windows, and even Linux devices, with mobile support coming soon. Our lightweight agent complements your existing tools, brings a lot of compliance issues into scope and under control, and can complete your Zero Trust picture.

To learn more and see our product in action, visit kolide.com.

Our thanks to Kolide for sponsoring MacStories this week.

Here’s an uncomfortable fact: at most companies, employees can download sensitive company data onto any device, keep it there forever, and never even know that they’re doing something wrong.

Kolide’s new report, The State of Sensitive Data, shines a light on an area of security that is often ignored, but is nevertheless a massive hole in many companies’ Zero Trust fortress.

These findings are particularly alarming given the overall state of device security. IT teams routinely struggle to enforce timely OS updates and patch management, meaning that end users are storing your most sensitive data–things like customer records, confidential IP, and plain-text access credentials–on devices that are vulnerable to attack.

This problem has gone unaddressed because until now there hasn’t been a good solution for it. MDM solutions are too blunt an instrument for dealing with sensitive data, and DLP tools are too extreme and invasive for most companies. After all, you’re not trying to ban downloads together, nor regard every download as suspicious. You’re just trying to make sure employees aren’t keeping data for longer than they need or keeping it on an unmanaged or unsecure device.

Kolide offers a more nuanced approach to setting and enforcing sensitive data policies.

Our premise is simple: if an employee’s device is out of compliance, it can’t access your apps.

Kolide lets admins run queries to detect sensitive data, flag devices that have violated policies, and enforce OS and browser updates so vulnerable devices aren’t accessing data.

Our unique approach makes device compliance part of the authentication process. If a device isn’t compliant, users can’t log in to their cloud apps until they’ve fixed the problem. But instead of creating more work for IT, Kolide provides instructions so users can get unblocked on their own.

To learn more and see our product in action, visit kolide.com.

Our thanks to Kolide for sponsoring MacStories this week.

SaneBox is the all-in-one solution to email overload, so you can spend less time managing email and more time on what matters. It works with any email client or service, and any device - literally anywhere you check your email. Oh, and there’s nothing to download or install. It just works.

SaneBox is like having a personal email assistant that automatically organizes your inbox, so you don’t have to, saving valuable time. SaneBox works in the background, so your most important messages always reach your inbox. The rest of your messages are carefully organized into designated folders like SaneLater and SaneNews for later. You can snooze emails, too, setting them aside to deal with when you have the time.

Better yet, if there’s something you never want to see again, drag in into the SaneBlackHole folder. It’s far easier than the hit or miss process of unsubscribing from email lists.

SaneBox has a built-in reminders system too. SaneReminders are a terrific way to stay on task. Send yourself a reminder to do something later, or get a reminder when someone hasn’t responded to one of your messages. SaneReminders is perfect for making sure that nothing falls through the cracks.

Also, because SaneBox works with your existing email setup, there’s no app to download or new email account to set up. You can use any email service and client you want.

Sign up today and save $25 on any subscription. You’ll see big benefits immediately as the message count in your inbox drops, and you’ll be able to maintain control going forward with SaneBox’s help.

Our thanks to SaneBox for sponsoring MacStories this week.

Backblaze offers unlimited computer backup for Macs and PCs for just $7 a month. Backblaze will backup your music, photos, videos, drawings, projects, and all the other data you have, so it’s safe and secure.

If you need to restore a file, that’s simple too. You can restore files from anywhere by downloading them directly from the web or Backblaze’s excellent mobile apps for iOS and Android. You can even have a backup shipped to you on a hard drive or flash key.

Backblaze offers a Restore Return Refund Program too. Buy a hard drive to restore your data, send the hard drive back to Backblaze within 30 days, and get a full refund on the drive’s price. It’s the perfect solution for restoring large sets of data.

If you’ve ever worried about deleting a version of an important project file, Backblaze has you covered. For just $2/month more, Backblaze will extend your file retention history to a full year. If you need to roll back to a previous version of a file, Backblaze makes it as easy as picking a date in the calendar.

Listed on the Nasdaq Stock Exchange under BLZE, Backblaze is committed more than ever to bringing easy and affordable data storage that you can trust. Over the years, the company has restored over 55 billion files for customers and is recommended by The New York Times, Inc, Macworld, PCWorld, Lifewire, Wired, Tom’s Guide, 9to5mac, and more, so you can rest assured that Backblaze has you covered.

Start a fully-featured free 15-day Backblaze trial with no credit card required today by going to Backblaze.com/macstories. Once you give it a try, you’ll see why so many users swear by Backblaze to protect their data.

Our thanks to Backblaze for sponsoring MacStories this week.

SaneBox is the all-in-one solution to email overload, so you can spend less time managing email and more time on what matters. It works with any email client or service, and any device - literally anywhere you check your email. Oh, and there’s nothing to download or install. It just works.

SaneBox is like having a personal email assistant that automatically organizes your inbox, so you don’t have to, saving valuable time. SaneBox works in the background, so your most important messages always reach your inbox. The rest of your messages are carefully organized into designated folders like SaneLater and SaneNews for later. You can snooze emails, too, setting them aside to deal with when you have the time.

Better yet, if there’s something you never want to see again, drag in into the SaneBlackHole folder. It’s far easier than the hit or miss process of unsubscribing from email lists.

SaneBox has a built-in reminders system too. SaneReminders are a terrific way to stay on task. Send yourself a reminder to do something later, or get a reminder when someone hasn’t responded to one of your messages. SaneReminders is perfect for making sure that nothing falls through the cracks.

Also, because SaneBox works with your existing email setup, there’s no app to download or new email account to set up. You can use any email service and client you want.

Sign up today and save $25 on any subscription. You’ll see big benefits immediately as the message count in your inbox drops, and you’ll be able to maintain control going forward with SaneBox’s help.

Our thanks to SaneBox for sponsoring MacStories this week.

Embarking on a healthy 2023 is easy with Funn Media’s trio of top-rated health and fitness apps: WaterMinder, FitnessView, and Calory. Together, they’ll help you track what you eat and drink and push your fitness to new levels.

WaterMinder makes tracking hydration simple. The app features an elegant interface and myriad ways to input the water and other drinks you consume throughout the day. The app is available on all of Apple’s platforms, is highly customizable, and includes support for Shortcuts, widgets, and Apple Watch complications. With WaterMinder’s rich charts for tracking, hydration reminders, and integration with Apple Health, you’ll have your hydration on track in no time flat.

Fitness tracking is essential to maintaining healthy habits and preventing injury. FitnessView has you covered on both fronts with deep insights into every workout, along with trend-spotting that lets you train smarter than ever before. The app, which is available on the iPhone and Apple Watch, offers deep integration with Apple Health. With extensive stats and goal tracking, FitnessView provides a holistic overview of where your fitness stands today and where you’re heading. The fully-customizable app also includes Home Screen widgets for monitoring your progress at a glance, a long list of workout types, and workout sharing with friends.

Calory rounds out Funn Media’s health and fitness trio with the most intuitive calorie tracker on the App Store. The app’s rich visualization of the calories you’ve consumed and easy input system remove the friction from tracking your goals. Available on all Apple platforms, Calory lets you log what you eat from anywhere, so you never forget to log a meal. Coupled with glanceable charts plotting your progress and access to more detailed stats and a journal view, Calory offers a complete overview of the food and drink you consume, along with deep nutritional data.

Get started down the road to health and fitness with WaterMinder, FitnessView, and Calory by visiting Funn Media’s website today to learn more about these fantastic apps.

Our thanks to Funn Media for sponsoring MacStories this week.

Zones makes time zone conversions effortless. It’s simple, beautifully designed, and available on your iPhone, iPad, and Mac, so no matter where you are or what you’re doing, knowing the best time to connect with family and friends in other cities is easy.

With just a glance, you’ll always know exactly what time it is no matter where your friends and family live. Plus, Zones includes:

• Detailed weather information with Apple Weather integration for every time zone you track
• Information about holidays around the world
• The ability to create reminders for each time zone, so you’ll recall the best time to reach out to someone on their birthday or an upcoming holiday, for example

Zones is perfect for remote teams too. The app has a built-in event creation feature that integrates with Apple’s Calendar app, making it easy for colleagues to coordinate meetings and calls.

With Zones, you also get support for the latest Apple technologies. Lock and Home Screen widgets, iCloud sync between devices, an iMessage app for sharing time zone information, and a Mac menu bar app add up to a fantastic user experience.

Of course, Zones is also privacy-focused. It doesn’t collect user data, the app doesn’t require an account, and all versions are ad-free.

Download Zones today for free on the App Store to stay in touch with family and friends. And when you’re ready to take Zones even further, sign up for Zones+ for just $1.99 per month or $19.99 per year to unlock holiday and weather information, plus the ability to create reminders.

Our thanks to Zones for sponsoring MacStories this week.