Download PDF

Imperva > Case Studies > Intuition Systems Leverages Imperva for PCI Compliance and Enhanced Data Security

Intuition Systems Leverages Imperva for PCI Compliance and Enhanced Data Security

Technology Category

Application Infrastructure & Middleware - Event-Driven Application
Cybersecurity & Privacy - Database Security

Applicable Industries

National Security & Defense
Telecommunications

Applicable Functions

Quality Assurance

Use Cases

Construction Management
Cybersecurity

Services

Cybersecurity Services
Testing & Certification

The Challenge

Intuition Systems, a high-volume electronic payment processor, was faced with the challenge of meeting the new PCI requirement for Web Application protection. As a Level 1 Payment Card Industry Service Provider, they had the option to either install application layer firewall technology or go through a secure code vulnerability assessment process for each of their custom applications. At the time, six of their custom applications processed credit cards and were subject to PCI. They expected this number to grow to 10 or more within the year. The process of obtaining a code vulnerability assessment of each custom application would be time-consuming and expensive, and would restrain their ability to add applications and scale their business. Therefore, they decided that the secure code assessment option did not fit their business model. They needed a solution that was scalable, easy to implement and manage, and would not impact their applications and IT infrastructure.

About The Customer

Intuition Systems, Inc. is a high volume electronic payment processor based in Jacksonville, Florida. The company processes over 28 million check and electronic payments annually for a diverse client base that includes industries such as cable, utility, insurance, healthcare, telecommunications, financial, and government. They provide custom online payment processing applications for their customers, which are required to seamlessly integrate with their clients’ systems. As a Level 1 Payment Card Industry Service Provider, they are subject to PCI requirements and need to ensure the highest level of data security.

The Solution

Intuition Systems selected Imperva's SecureSphere Database Security Gateways with Web Application Firewall technology to meet their requirements. Unlike other Web Application Firewalls, SecureSphere can be extended to include protection of the database. This unique ability to provide an integrated solution greatly increases visibility into data access and usage through Web applications to the database. SecureSphere protects sensitive business and identity data from Web application vulnerabilities, and the integrated solution provides much greater data security and protection from both external and internal threats. SecureSphere was easy to install and manage, and it operated transparently, meaning Intuition did not have to change or augment their existing infrastructure. SecureSphere was also scalable to handle their rapidly growing number of custom Web applications.

Operational Impact

The implementation of Imperva's SecureSphere has enabled Intuition Systems to comprehensively protect sensitive data from external hackers and from within their organization. SecureSphere’s unique user profiling and its ability to monitor and control all database activity, even through applications, give Intuition confidence that the data is thoroughly protected. SecureSphere’s ability to protect their custom Web applications ensures Intuition meets PCI requirements without the expense of submitting to multiple external secure code vulnerability assessments. The SecureSphere solution has the critical added benefit of scaling with projected growth in the number of applications, and allows Intuition to scale their business. Because SecureSphere operates automatically and is easy to maintain and manage, Intuition will save time and conserve IT resources.

Quantitative Benefit