About Project
A revolutionary international money transfer app, enables seamless transactions in 160 currencies across 150 countries. With over 100,000 downloads on Google Play, They prioritizes security in facilitating direct bank-to-recipient money transfers via existing debit, credit, or prepaid cards.
Client's Goals
- Enhance Security and Network Configuration
- Support and Improve Existing Infrastructure
- Streamline Deployment Process
Client's Challenges
Limited Team Capacity:
Small engineering team restricting the scope of tasks.
Need to enhance system capabilities with limited resources.Strict Commitments:
Commitment to safeguarding financial transactions and sensitive information.
Non-negotiable need for data confidentiality to maintain user trust.Security Compliance:
Pursuit of PCI DSS compliance.
System and processes required enhancements for meeting industry standards.
Our Solution
Workload Optimization:
Comprehensive approach to enhancing system security.
Improved understanding of alert severity for strategic prioritization.System Monitoring:
Proactive system monitoring implemented for a smooth customer experience.
Weekly scans of instances and applications using OpenVAS.
Security alerts configured through Wazuh and Suricata.PCI DSS Gaining:
Optimization for PCI Security Standards.
Setup of a Web Application Firewall for added protection.
Segregation of the network into task-specific subnets.
Intra-cluster traffic segmentation through NetworkPolicy.
Results and Benefits
- Optimized Infrastructure:
Achieved a more efficient and robust system.
Enhanced capabilities for money transfer operations. - Overall Security Improvement:
Strengthened the security posture to meet strict commitments
Improved handling of financial data and confidential information. PCI DSS Compliance Gaining:
Successfully met the core pillars of PCI Security Standards
Streamlined the process for passing inspections.In-Depth System Monitoring:
Implemented a proactive monitoring system.
Swift identification and resolution of potential vulnerabilities.
Technology Stack
- Google Cloud
- GKE (Google Kubernetes Engine)
- Grafana
- Prometheus
- Suricata
- OSSEC
Showcases a transformation in security practices, ensuring a secure, compliant, and efficient platform for global money transfers. The implemented solutions not only met the client’s goals but also set the stage for future innovations.