Top Cybersecurity Companies

• Title: Cyber Security Resilience
• Client:
• Expertise: Cyber Security
• Focus Areas: Network Security, Penetration Tests, Other

Description

Discover how Accedia transformed the cybersecurity landscape for a major entertainment company, turning critical vulnerabilities into a robust digital fortress. In our comprehensive case study, learn about the innovative strategies and tools used, including Penetration Testing and Azure Defender, that led to a substantial reduction in security risks.

Challenge

A leading entertainment company faced severe security breaches, including a vulnerability allowing unauthorized database downloads, risking user data and operation integrity.

Solution

Accedia addressed this by implementing Penetration Testing and Azure Defender, focusing on regular security assessments and continuous monitoring to identify and rectify weaknesses.

Results

The implementation led to a remarkable 75% reduction in vulnerabilities, significantly enhancing the company's cybersecurity posture and safeguarding user data. Read more at https://accedia.com/case-study/unlocking-cybersecurity-resilience-case-study/

• Title: Identity Management Platform: ROSSO
• Client:
• Expertise: Cyber Security

Description

To enhance the user experience and IT system security, we developed a fully-fledged identity management solution for the real retail group (now: "mein real"), among other things as a single sign-on service for the end customers of the various online touchpoints (online store, app, etc.) under the name Rosso. The software ensures that my real customers can log in conveniently and securely via a one-time authentication procedure on various online sales outlets. The particular challenge was to establish parallel user sessions on four different, unrelated platforms (store systems, CMS and app framework). In addition, there was the connection of new authentication options such as Apple and Facebook. As part of a custom development project and in close cooperation with the IT department of the mein real retail group, we launched the Rosso Identity and Access Management (IAM) platform. In addition to the "single sign-on" core feature, Rosso also includes comprehensive user management for more than 10 million mein real customers. At the same time, the IAM system is kept flexible via APIs so that additional services and platforms can be connected at any time. We have also built Rosso on a stable technical foundation that manages around 2 million user authentications per day using the latest security standards.

Challenge

The uncomplicated, efficient and secure management of users is an evergreen in online retail - especially when a retail company has several sales channels that overlap in terms of users. It turns out that the less effort a user has to expend to log in to a sales platform and manage it independently, the higher the conversion rate. At the beginning of the Rosso project, real GmbH operated several platforms with separate user administrations and login mechanisms. First steps towards an out-of-the-box identity provider software were already taken, but quickly discarded due to lack of transparency and usability.

Solution

Taking into account all relevant customer touchpoints, including several online stores, a smartphone app and a personalized offer portal, we developed a central Identity and Access Management (IAM) platform. We created interfaces to various, unrelated systems based on TYPO3, .NET MAUI and Angular and also connected a historically grown store system used by real. As a result, 10 million customer accounts were transferred to the new Rosso system, which from then on could log in via single sign-on. At the same time, we created a high-performance IT infrastructure that could withstand daily loads of 2 million authentications and gave users access to various services and resources. We solved the authentication using JavaScript SDK and PHP SDK and the integration was done with the help of modern, widely used authentication protocols. Protection of personal data was a particularly important factor in the Rosso project. Among other things, we implemented intelligent machine learning algorithms to defend against and predict unauthorized access.

Results

Thanks to the Rosso identity management platform and the associated single sign-on solution, mein real customers save considerable time when logging in and can manage their personal information centrally and clearly in one place. The Rosso platform also enables the personalized delivery of offers. This comprehensive service is used by around 2 million users every day. The Rosso platform currently manages more than 10 million accounts - without any loss of performance.

• Title: EBANQ: Confidence in the future of payment transactions
• Client: EBANQ
• Expertise: Cyber Security
• Focus Areas: Penetrationstests, Sonstiges

Description

EBANQ is a leading white-label online banking application that specifically serves payment providers, neobanks, wealth management firms and cryptocurrency exchanges. With over 40,000 active accounts and more than one million transactions per month, EBANQ faces the challenge of ensuring the highest security standards to protect against increasingly sophisticated cyberattacks.

Challenge

As a digital hub for sensitive financial transactions, EBANQ needed to strengthen its security measures to ensure the protection of confidential data and maintain the trust of its users. The complexity of the security requirements called for in-depth technical expertise.

Solution

Vention acted as a strategic partner by first performing penetration testing to identify vulnerabilities, followed by a comprehensive technical audit. By integrating DevSecOps tools and OWASP dependency controls into EBANQ's CI/CD pipeline, vulnerabilities were identified in real time. A critical step was the development of a comprehensive security roadmap that provided EBANQ with clear guidance. In addition, Vention optimized the infrastructure by switching to a Kubernetes cluster and introduced cost-saving measures that significantly reduced operational and cloud costs.

• Title: Security Threat Modeling for the Design of Secure Applications and Cloud Environments
• Client: Tochter eines international tätigen Automobil Unternehmens
• Expertise: Cyber Security
• Focus Areas: Attack Detection & Response, Network Security

Description

As part of its digital transformation and strategy, our client has recognized that IT and information security is essential for existing and new applications, IT and cloud system environments. To achieve this, these new projects need to be assessed for appropriate security from the design, implementation phase to go live. This includes the analysis of the architecture and the design with corresponding security frameworks up to the examination of the technical and organizational information security, in order to recognize corresponding weak points at an early stage and to eliminate them via targeted measures. The internal processes have already been implemented in an agile manner in accordance with Scrum, and are based on ISO/IEC 27001 for information security.

Challenge

- Implementation of a sustainable security strategy to enable the customer to include security relevant aspects in future projects and to generate a learning effect for the customer. - Holistic solution approach considering technical and organizational security. - Generation of improvement and streamlining potential of the security processes (Waterfall vs. Agile).

Solution

Alter Solutions Germany supports this process by providing a corresponding service. Our main task is to support the customer optimally in the analysis of the security and the development of the measures. Furthermore, we support our customers in risk management during internal approval processes.

Results

Our customer decided to work with Alter Solutions Germany because, on the one hand, it needed a partner with the appropriate experience in security and the design of complex IT architectures and, on the other hand, the necessary technical and process know-how to be able to provide the customer with optimal support. This ensures that the security complies with the corporate guidelines and at the same time the representatives of the specialist departments are professionally supported on the IT side.