Kaltura operates a cloud platform serving millions of daily users across over 1,000 organizations worldwide, including Fortune 500 enterprises, universities, and media companies. The Video Experience Cloud handles video creation, management, and delivery at scale for education, corporate collaboration, virtual events, webinars, and enterprise portals. The company is publicly traded (Nasdaq: KLTR) and maintains a hybrid workforce across New York, London, Singapore, and Tel Aviv.
The platform's attack surface spans multimodal AI, generative video, and conversational interfaces layered into video workflows. This means threat modeling extends beyond traditional media delivery infrastructure into AI model validation, prompt injection vectors, and the data pipelines feeding machine learning systems. Organizations rely on Kaltura to handle sensitive video content - lecture recordings, corporate communications, financial presentations - which creates compliance and data residency requirements across multiple jurisdictions.
Security work here touches video codec processing and transcoding pipelines (historically a source of parser vulnerabilities), authentication and authorization across federated customer instances, API security for the platform's programmatic access layer, and the emerging risk surface of AI-driven features. The hybrid infrastructure and customer diversity mean security teams operate across infrastructure hardening, third-party risk management for integrations, and incident response protocols that account for educational institutions, enterprises, and regulated media organizations operating simultaneously on shared platform infrastructure.
