Fintonic minskar tiden för säkerhetsuppgifter med upp till 90 % med Xygenis lösning

Fallstudie

logotyp-fintonic

Om Fintonic

Fintonic is a prominent financial institution that provides secure and efficient financial services. Their mission is to make personal finances accessible to the public. The platform is verified and validated by experts in digital security and privacy. It provides an advanced access point for users to enter their accounts and financial information. Fintonic then guides them through analyzing millions of financial data points, helping users find relevant financial products.

Customers can anonymously and securely make financial and banking transactions using the Fintonic application. Managing numerous code repositories crucial to its operations, Fintonic continuously seeks innovative solutions to protect sensitive data and maintain the integrity of its development & CI/CD processer.

Utmaningen

Fintonic faced significant challenges in ensuring the security of its development process. The primary concerns were the potential leakage of sensitive data and overall security vulnerabilities within the development process. Additionally, the team was worried about the SCM system’s ability to handle all these security issues efficiently without slowing operations.

To address these challenges, Fintonic needed a solution that could effectively scan for secrets, vulnerabilities, and malware in third-party open source dependencies and configurations in their Infrastructure as Code (IaC). Moreover, the solution had to integrate seamlessly into their development environment to prevent disruptions to their workflow.

We were concerned about our team and system’s ability to handle all security issues efficiently without slowing our operations.

Enrique Cervantes
CISO-CTO Fintonic

Lösningen

After evaluating several options, Fintonic chose Xygeni because of its comprehensive security coverage and seamless integration capabilities. Xygeni’s ability to integrate directly into developers’ workstations stood out, as it prevents the accidental publication of secrets and ensures continuous monitoring and validation of security measures within the developers’ tools.

Furthermore, Xygeni’s holistic approach to security was exactly what Fintonic needed to maintain its rigorous standards without sacrificing speed or efficiency. Xygeni’s solution effectively scans for secrets, vulnerabilities, and malware in third-party dependencies and monitors suspicious activities, providing the robust security Fintonic requires.

Fintonic began the integration process with a Proof of Concept (PoC) to test Xygeni’s scanners. The smooth integration demonstrated Xygeni’s ability to monitor systems continually without causing workflow delays. This easy implementation allowed Fintonic to quickly incorporate Xygeni into its development environment, ensuring continuous security monitoring without delaying operations.

Xygeni-stödprodukter

Although Fintonic has tested all Xygeni products, increasing analysis coverage and issues detection, the focus and validated benefits during the PoC were concentrated on the following:

ASPM

To provide a single analysis and prioritization pane of glass to ensure maximum focus and impact of the remediation activities on the application’s global security without increasing security team efforts.

Hemligheter Säkerhet

för certifiering av att inga hemligheter exponerades i någon del av den aktuella applikationen och för att validera kontroll av läckor redan innan committing i SCM.

Anomali upptäckt

to detect any suspicious activity in the SDLC infrastructure to certify good user and privilege management practices for rotating developers.

Resultatet

Sedan implementeringen av Xygeni, Fintonic har upplevt betydande förbättringar i sina säkerhetsprocesser. Viktiga funktioner i Xygeni har varit särskilt avgörande för denna omvandling:
75-90%
minskning av den tid som krävs för att prioritera säkerhetsuppgifter
Enrique Cervantes
CISO-CTO Fintonic

Suspicious Activities

Xygeni’s ability to monitor suspicious activities allow for quick action against potential security threats. By flagging unusual activity in the infrastructure, Fintonic can respond swiftly to protect their systems.

Prioritization Technology

Xygeni’s prioritization technology enables Fintonic to address the most critical security issues first, reducing unnecessary noise. This feature allows the team to focus on problems that provide immediately returns and significantly enhances security.

Health Check Modulerna

Ocuco-landskapet health check module efficiently identifies maintenance gaps and licensing issues with third party dependencies. This helps keep Fintonic’s systems secure, updated, and compliant.

Xygeni har förändrat hur vi hanterar applikationssäkerhet. Dess omfattande skanningsfunktioner gör att vi kan hitta och prioritera alla hemligheter, sårbarheter och felkonfigurationer i våra SCMInsikterna som Xygeni tillhandahåller gör det lättare för oss att förstå effekterna av dessa problem och åtgärda dem snabbt. Det är inte bara ett verktyg; det är nu en integrerad del av vår säkerhetsstrategi.

Enrique Cervantes
CISO-CTO Fintonic

Säkra din programvaruutveckling och leverans

med Xygeni Security