ABOUT THE CLIENT
One of the clients of CloudifyOps is an India Based – Shipping Management Application with a worldwide presence. Even though it had a worldwide presence the major issue with this client was the lack of visibility to the application, servers and pipeline’s overall health. Due to this the attacks and vulnerabilities were huge which resulted in impacting production servers thus leading to longer downtimes. In short the first and foremost step was to cater the #security needs.
THE SOLUTION
As the client approached CloudifyOps for a solution to reduce larger amount of time involved in the entire process along with the increased costs for providing technical resources, so a detailed case study was done by the team of developers at CloudifyOps to provide the following solution:
-
Collected the injection data points for the end-to-end infrastructure and for all the applications.
-
Logos and data from injection points were processed through ELK stack.
-
Integration was done through various tools like Jenkins, GitHub, SonarQube etc. for getting all the product level metrics..
-
Implemented with OSSEC- WAZUH in order to work along with ELK Stack as a host and endpoint based intrusion detection system.
-
Zabbix was introduced for monitoring, Kabina for data analysis of production systems. All of these were the key parameters for grading DevOps maturity model.
BENEFITS DELIVERED
-
The amount of work during quarterly VAPT scans was reduced due to the insights provided by Sonarqube on quality of code.
-
An integrated view was provided for the check-in, build failure, automation coverage which helps in providing an engineering maturity view.
-
Due to the real time altering and active responses to security threats results in 99% uptime of the server.
-
Through the single unified platform all the components of the infrastructure are being monitored for all the threats.
