下载PDF

Fidelis Security > 实例探究 > Xero Chooses Cloudpassage Halo for Workload Security at Devops Speed

Xero Chooses Cloudpassage Halo for Workload Security at Devops Speed

技术

网络安全和隐私 - 云安全
基础设施即服务 (IaaS) - 云计算

适用行业

Software

适用功能

离散制造
产品研发

用例

网络安全
自动化制造系统

服务

云规划/设计/实施服务
网络安全服务

挑战

In 2014, Xero was experiencing strong growth and needed new technologies to support their next wave of growth. They needed technologies that would enable fast scalability, fast infrastructure deployment, and automated security. Xero solved the first two challenges by moving their IT infrastructure from a traditional outsourced datacenter environment to a public cloud environment— Amazon Web Services. However, finding a security system that was fully automated and could keep up with their fast-paced DevOps environment was a challenge. Most IT security products on the market would not perform efficiently in such an environment. Xero’s lead security architect, Aaron McKeown, wanted to provide Xero’s DevOps teams with a set of strong security controls that could be baked into their DevOps processes, not bolted on after the fact.

关于客户

Xero is a company that develops cloud-based accounting software for small and medium-sized businesses. They have over 860,000 subscribers in more than 180 countries, and their software accounts for over $1 trillion of incoming and outgoing transactions per year. In 2014, after several years of strong growth, Xero knew that they needed some new technologies to support their next wave of growth. Specifically, Xero needed technologies that would enable fast scalability, fast infrastructure deployment, and automated security.

解决方案

After a lengthy search for the right security tool, McKeown chose CloudPassage Halo. Halo met all of McKeown’s requirements, and then some. Built for speed, Halo is fully automated, everything from installation of agents all the way through to policy assignment, alerting ,and reporting. Halo’s architecture supports elastic operating environments and can scale just as fast as your operations teams can deploy new workloads. McKeown was able to realize his dream that developers would never need to log into the Halo security console. All operations could be done programatically through the API. Halo includes several different kinds of security controls that allowed McKeown to minimize the software attack surface, reduce the network attack surface, ensure that Xero’s workloads have not been compromised, and maintain compliance with PCI data regulations. Halo is able to transmit all of the information that it learns about the security posture of Xero’s workloads to Xero’s SIEM which is Splunk.

运营影响

Halo is easy to use. Working with CloudPassage, the Cloud Security Team at Xero quickly built up knowledge of the Halo platform, which was then turned into patterns and reference materials for the Xero product team. As a result, Halo was deployed as standard for all EC2 instances.
Xero has expanded the scope of deployment. Initially, Halo was deployed to core platform systems, but as product teams migrated to AWS the scope of deployment was increased.
Xero worked closely with CloudPassage to build a strong relationship and to achieve the outcome they needed. This was a shared journey for Xero and CloudPassage.