Gopuff Cuts Threat Response from Days to Seconds

One Million Transactions a Day, Zero Room for Error

There's no such thing as a quiet day in cybersecurity at Gopuff. As one of the fastest-growing instant commerce companies in the world, Gopuff processes roughly a million customer transactions every day. With that volume comes an enormous and constantly shifting attack surface.

"There's really no typical day for cybersecurity at Gopuff," says Ravi Nori, the company's head of security. "We get a million transactions a day and anything can happen in those transactions."

Gopuff runs on Google Workspace. So when the security team went looking for a solution that could match the pace and complexity of their environment, they had a specific mandate: find something built natively for Google Workspace, not retrofitted to it.

"I wanted someone that was born and bred for Google Workspace. That was a problem we were trying to solve and that's what led me to Material."

The Breaking Point: A Leaner Team, a Legacy Tool, and a Growing Gap

The search for a better solution became urgent after Gopuff underwent significant organizational changes. Headcount reductions meant the security function had to accomplish more with less, including the loss of a dedicated SOC team that had previously handled email threat triage.

At the same time, the limitations of their legacy email security vendor were becoming impossible to ignore. The pricing model was opaque and unpredictable, the team hit capacity limits and was forced to pay for additional allocations, and the product itself couldn't keep pace with the threats.

"What would I get from a legacy vendor? You're allocated a certain number of boxes and you have to pay extra. Our $100,000 contract was turning into $200,000, $250,000, and all this is leading to complexity that I just cannot handle."

Worse, the legacy tool was slow. Triaging a single email security problem could take days, far too long when threats move in real time. And when something did surface, the vendor's approach to employee education was a blunt instrument: send everyone to a training module. "I don't need a training module at that time. I need to be able to cut the problem at the source, then go train employees," says Ravi

Instant Visibility, Immediate Results

When Gopuff brought Material Security on for a trial, the difference was apparent within hours. Material's API-based integration with Google Workspace took just six minutes to set up, with no DNS record changes and no mail routing reconfiguration. Unlike the legacy vendor, which had been quietly missing threats, Material surfaced those threats immediately.

"As soon as we brought Material in, it's like everything that I thought was going on was happening. And our legacy vendor was not bringing these problems up to the forefront," says Ravi.

The improvement in response time was dramatic. Problems that previously took days to triage now took minutes. Often, seconds.

"It would take days to triage a problem, whereas when I brought on a trial, it would take minutes — sometimes even seconds. I need six minutes to do the integration and seconds to solve problems at scale."

Security That Teaches Without Training

One of the most meaningful changes Material introduced wasn't just faster detection, it was smarter employee behavior, achieved without mandatory training sessions.

Rather than relying on after-the-fact awareness campaigns, Material intercepts threats in the moment and delivers in-context prompts that help employees recognize and respond to risky situations as they unfold. Employees learned to make better decisions naturally, without being pulled out of their workflow. "I think what Material did was block at the right time and sort of self-educated employees versus me saying, 'Hey, go take a training class,’ which is what we had to do with the legacy vendor," explains Ravi.

The impact has been measurable and lasting. In eight months following Material's deployment, critical email vulnerabilities effectively disappeared.

"I'm happy to say that in probably six to eight months, I have not seen those types of critical vulnerabilities really appear ever again."

Support That Shows Up At Any Hour

For a security team operating without a full SOC, knowing that help is available at any hour isn't a nice-to-have, it's essential. Material's support model has consistently delivered.

The team communicates via a dedicated Slack channel, and response times are reliably fast, even in the middle of the night.

"Nine times out of ten, I'm going to get an answer within the next two or three minutes. I needed immediate customer support, and I would get Slack messages returned to me in the middle of the night."

That kind of responsiveness has become a key benchmark for how Ravi evaluates any vendor relationship.

A Partner, Not Just a Product

What has distinguished Material over the course of the relationship is the powerful combination of technology and partnership. The Material team has consistently shown up as a strategic collaborator, not a sales organization looking for upsell opportunities.

For a security leader managing an enterprise environment with limited headcount and unlimited complexity, that kind of engagement makes all the difference.

‍