CheckPoint Software Case Studies Omnyway's Secure DevOps for Retail Mobile Platform with CloudGuard Dome9

Edit This Case Study Record

	Omnyway's Secure DevOps for Retail Mobile Platform with CloudGuard Dome9 CheckPoint Software

Omnyway's Secure DevOps for Retail Mobile Platform with CloudGuard Dome9

CheckPoint Software

Technology Category	Cybersecurity & Privacy - Network Security Cybersecurity & Privacy - Security Compliance
Applicable Industries	National Security & Defense Retail
Applicable Functions	Product Research & Development Quality Assurance
Use Cases	Leasing Finance Automation Tamper Detection
Services	Cloud Planning, Design & Implementation Services System Integration
Challenge	Omnyway, a mobile shopping and payment platform provider, faced several challenges in managing its AWS cloud environment. The environment consisted of 2 regions, 4 accounts, and 20 VPCs supporting different applications, with applications spread across all accounts. The VPCs were designed to isolate specific information that did not need to be shared. All applications were replicated in the second region for resiliency and redundancy. However, as the platform scaled, the security groups became complicated, making it hard to track workflow and locate misconfigurations. Omnyway needed clear visibility into its security infrastructure. Another challenge was providing secure access for agile DevOps. Omnyway was providing developers access to their production environment through their bastion host, which was consistently experiencing brute force attacks. Lastly, Omnyway needed to enforce continuous compliance and security best practices to meet PCI certification guidelines and secure their environment. Read More
About Customer	Omnyway is a born-in-the-cloud advanced mobile shopping and payment platform that provides retailers with the ability to offer their customers a complete digital shopping experience with the use of their smartphone for all aspects of their buying journey. Omnyway’s solution enables their customers to be more competitive by creating a dynamic digital channel between the retailer and shopper across all levels of interaction including in-store, online, in-app, virtual aisle and dynamic media. Omnyway’s platform is designed to interface with a retailers existing system and mobile app with minimal development needed to turn a traditional retail store into a first-class shopping experience for its customers. Omnyway’s customers consist of several of the Fortune 500 retailers and is headquartered in Redwood City, CA. Read More
Solution	Omnyway selected CloudGuard Dome9 for its powerful network security visibility at scale. The CloudGuard Dome9 platform’s visualization tool, CloudGuard Dome9 Clarity, provided Omnyway with granular visibility into their network topology and workflows. This helped them locate vulnerabilities and remediate them in-place. They were also able to use the VPC flow log feature to identify any misconfigurations. To provide secure access for agile DevOps, CloudGuard Dome9’s Dynamic Access Leases provided Omnyway’s DevOps team with time-limited, on-demand access to services and ports. This feature removed the need for using a bastion host and reduced the potential attack surface. To enforce continuous compliance and security best practices, the CloudGuard Dome9 Compliance Engine provided Omnyway with a way to bolster security across their AWS environment. It automated scanning of its environment and generated continuous compliance reporting. Read More Log in to view content
Contents

Technology Category

Cybersecurity & Privacy - Network Security

Cybersecurity & Privacy - Security Compliance

Applicable Industries

National Security & Defense

Retail

Applicable Functions

Product Research & Development

Quality Assurance

Use Cases

Leasing Finance Automation

Tamper Detection

Services

Cloud Planning, Design & Implementation Services

System Integration

Challenge

Omnyway, a mobile shopping and payment platform provider, faced several challenges in managing its AWS cloud environment. The environment consisted of 2 regions, 4 accounts, and 20 VPCs supporting different applications, with applications spread across all accounts. The VPCs were designed to isolate specific information that did not need to be shared. All applications were replicated in the second region for resiliency and redundancy. However, as the platform scaled, the security groups became complicated, making it hard to track workflow and locate misconfigurations. Omnyway needed clear visibility into its security infrastructure. Another challenge was providing secure access for agile DevOps. Omnyway was providing developers access to their production environment through their bastion host, which was consistently experiencing brute force attacks. Lastly, Omnyway needed to enforce continuous compliance and security best practices to meet PCI certification guidelines and secure their environment.

About Customer

Omnyway is a born-in-the-cloud advanced mobile shopping and payment platform that provides retailers with the ability to offer their customers a complete digital shopping experience with the use of their smartphone for all aspects of their buying journey. Omnyway’s solution enables their customers to be more competitive by creating a dynamic digital channel between the retailer and shopper across all levels of interaction including in-store, online, in-app, virtual aisle and dynamic media. Omnyway’s platform is designed to interface with a retailers existing system and mobile app with minimal development needed to turn a traditional retail store into a first-class shopping experience for its customers. Omnyway’s customers consist of several of the Fortune 500 retailers and is headquartered in Redwood City, CA.

Solution

Omnyway selected CloudGuard Dome9 for its powerful network security visibility at scale. The CloudGuard Dome9 platform’s visualization tool, CloudGuard Dome9 Clarity, provided Omnyway with granular visibility into their network topology and workflows. This helped them locate vulnerabilities and remediate them in-place. They were also able to use the VPC flow log feature to identify any misconfigurations. To provide secure access for agile DevOps, CloudGuard Dome9’s Dynamic Access Leases provided Omnyway’s DevOps team with time-limited, on-demand access to services and ports. This feature removed the need for using a bastion host and reduced the potential attack surface. To enforce continuous compliance and security best practices, the CloudGuard Dome9 Compliance Engine provided Omnyway with a way to bolster security across their AWS environment. It automated scanning of its environment and generated continuous compliance reporting.

Impact #1	With the implementation of CloudGuard Dome9, Omnyway was able to gain clear visibility into their security infrastructure, locate misconfigurations, and secure their environment. The solution also provided secure access for agile DevOps, reducing the potential attack surface and the number of brute force attacks. The CloudGuard Dome9 Compliance Engine helped Omnyway enforce continuous compliance and security best practices, enhancing their security posture. As a result, Omnyway was able to build a secure mobile platform for its retail customers, meeting PCI certification guidelines and going beyond the required levels of security. The company is now looking to expand its channel and develop its customer-facing service, with plans to continue using CloudGuard Dome9’s comprehensive security and compliance automation solutions for their future multi-cloud needs.

Impact #1

With the implementation of CloudGuard Dome9, Omnyway was able to gain clear visibility into their security infrastructure, locate misconfigurations, and secure their environment. The solution also provided secure access for agile DevOps, reducing the potential attack surface and the number of brute force attacks. The CloudGuard Dome9 Compliance Engine helped Omnyway enforce continuous compliance and security best practices, enhancing their security posture. As a result, Omnyway was able to build a secure mobile platform for its retail customers, meeting PCI certification guidelines and going beyond the required levels of security. The company is now looking to expand its channel and develop its customer-facing service, with plans to continue using CloudGuard Dome9’s comprehensive security and compliance automation solutions for their future multi-cloud needs.

Benefit #1	Just-in-time access to ports and services for DevOps teams
Benefit #2	Centralized view of security and compliance posture
Benefit #3	Granular control over security groups and compliance policies

Benefit #1

Just-in-time access to ports and services for DevOps teams

Benefit #2

Centralized view of security and compliance posture

Benefit #3

Granular control over security groups and compliance policies

Download PDF Version

Overview

Omnyway's Secure DevOps for Retail Mobile Platform with CloudGuard Dome9

Operational Impact

Quantitative Benefit