The challenge
D&B provides an API that lets partners and customers query company data. It needed stronger API protection without adding friction for partners, an intelligent authentication framework, a low-downtime move to serverless AWS, and a standard approach to multi-factor authentication across the enterprise.
What Zephon did
- API security: API management, federation services, and monitoring to prevent unauthorized access.
- Adaptive authentication: risk-based authentication for partners using OneLogin and Azure AD OIDC.
- Security monitoring: AWS ELK Stack for real-time security analytics and telemetry.
- Serverless migration: moved workloads to AWS Lambda for better scalability and lower operating cost.
- MFA strategy: an enterprise-wide YubiKey MFA framework and rollout plan aligned with NIST 800-63.
- IAM roadmap: a forward-looking identity and access management strategy.
Results
- Stronger API security through better federation, authentication, and monitoring.
- Infrastructure optimized for cost and performance on AWS Lambda.
- A standardized YubiKey MFA deployment across the enterprise.
- Stronger identity and access governance for applications.