META
Cyber security in mixed reality for Meta
Challenge
When we started building our trust tools, we faced a lot of uncertainty and complexity. We had to bring together different teams, align on legal and policy requirements, and create a shared language to move forward. At times, resources were stretched thin, so I often stepped in to keep things moving and make sure we stayed efficient. Working closely with engineering and legal partners was key to overcoming technical and policy hurdles, especially for features like security logs and audit APIs.
Security logs and API
We're expanding our existing audit logs framework
to include hardware logs. This includes adding more filters and new signals to provide admins with a more comprehensive view of system activity.
This expansion enables admins to gain deeper insights into system behavior, helping them identify potential issues and make data-driven decisions.
“We improved the quality in the logs with bulk actions and a more robust search engine ”
Adoption
Audit Logs API to GA: We successfully shipped security audit logs API to GA, which was launched last year in Beta, and saw successful adoption. We also launched Webhooks to provide real-time updates for security logs, enhancing platform responsiveness. This unlocks a much-awaited request from enterprises to enable integration with popular SIEM providers.
The Security logs page recorded 1K+ unique visits in Nov ‘25
Security Score
Our admins considered security to be a critical feature in order to understand the health of their organization’s systems. Our competitors have been offering security scores for years and it is part of the core offering of a reliable enterprise product.
“We experimented with multiple versions to identify the most impactful feature for administrators. Emphasizing a sense of urgency and prioritization was essential to our approach.”
Adoption
We successfully shipped Security Score to GA in v82 (Oct ‘25), which was launched last year in Beta, and proved significantly valuable to admins. In the 30d post launch, 1085 companies saw their score (up 25%), 178 companies saw recommended actions (up 40%), 107 companies have taken a recommended action (up 38%), 75.3% of MMAD coverage in companies with 100+ devices used security score.
Data loss prevention
Data Loss Prevention (DLP) means keeping important information safe and making sure it doesn’t get lost or shared with the wrong people.
It’s about using rules and tools to stop things like private details or company secrets from accidentally leaving the organization.
The main goal is to protect sensitive data and help everyone follow privacy and security guidelines.
Security Insights
Security Insight served as the central overview that brought all the tools together in one coherent place. Users could easily search for specific data points across time, compare trends side by side, and receive timely notifications whenever any metrics required their attention. We also created and maintained a library of widgets there that updated automatically.
“Insights is the overview for troubleshooting devices overtime”
Adoption summary
Adoption of the trust tools was strong and strategic, the tools made a measurable impact across the organisation:
Meaningful Value: 39.6% of all HMS companies and 51.1% of MMAD from companies with 10+ devices used trust tools, reinforcing their value and necessity.
Enterprise Integration: The launch of webhooks and audit logs API unlocked long-awaited enterprise requests, enabling seamless integration with existing security infrastructure.
User Engagement: The tools saw rapid uptake, with admins actively using new features to monitor, troubleshoot, and ensure compliance.
“Coverage reached 75.3% of MMAD in companies with 100+ devices.”
Security Logs & Audit APIs: We launched platform-agnostic security logs and APIs, enabling real-time updates and integration with enterprise SIEM providers. The security logs page recorded over 1,000 unique visits in November 2025, demonstrating strong engagement.
Security Score: The Security Score feature went GA in October 2025, with 1,085 companies viewing their score (up 25%), 178 companies seeing recommended actions (up 40%), and 107 companies taking action (up 38%). Coverage reached 75.3% of MMAD in companies with 100+ devices.
Data Loss Prevention (DLP): We completed code for DLP controls, set to release in v85, adding protection for Bluetooth, microphone, and camera functionalities.
““Thanks we are making huge changes to a complex transaction journey, impacting a very wide breadth of internal and external teams - building a shared vocabulary with which we can refer to the nuances of this complexity will be critical to a smooth and successful launch” ”