About the Company

This fintech company specializes in offering accessible financial products designed to serve consumers with limited or no access to traditional banking services. They provide a credit card with a high approval rate and a savings account with a competitive interest rate, making financial management easier for a broad range of users. Their mission is to empower people by offering simple, user friendly solutions that support financial growth and security. Everestek is their sole technology partner for DevSecOps solutions.

Services Provided

• 2-Factor Authentication using WhatsApp OTP: This method adds an extra layer of security by requiring users to verify their identity through a One Time Password (OTP) sent via WhatsApp. This ensures that even if a password is compromised, unauthorized access is prevented without the OTP.
• Digital Signature Encryption Linking Accounts to Devices: This security measure involves encrypting a digital signature that is tied to a specific device. This linkage ensures that only the authorized device can access the account, preventing unauthorized access from other devices.
• Custom Authorizers to Prevent Unauthorized Access: Custom authorizers are implemented to verify each request made to the system, ensuring that only authenticated users with the appropriate permissions can access the resources. This adds a layer of control tailored to specific security needs.
• Modular, Idempotent Security Components Adaptable to Various Business Rules: These components are designed to be reusable and consistent in their output, even when the same operation is performed multiple times. They can be easily adapted to different business rules, ensuring security measures align with varying business requirements without the risk of duplication or error.
• Security Automation: Everestek implemented security automation for a North American Unicorn, including blocking IP addresses for a specified duration if too many requests are received, ensuring protection against malicious activity.
• Automated Incident Management: We developed an automated ticketing system that logs incidents, describes their causes, and provides remedies, streamlining the incident management process.
• Support CRM Automation: Everestek enhanced their support CRM by creating secure scripts that automatically update customer information, improving efficiency and security.
• Monitoring and Defense: We monitor their services through Grafana to detect and mitigate potential threats like DDoS attacks, ensuring continuous service availability.