Press
NEW YORK – November 5, 2024 – Sonrai Security, a leader in cloud security solutions, is pleased to announce a significant milestone in cloud security and operational efficiency for Global Atlantic Financial Group, a leading U.S. retirement and life insurance company. Through adopting Sonrai’s Cloud Permissions Firewall, Global Atlantic has reduced the time required to identify and resolve cloud identity and permissions issues from six months to six days, achieving substantial time savings and improved developer productivity while significantly reducing its cloud attack surface.
Global Atlantic’s AVP of Security Operations, Cole Horsman, recognized the need for a scalable, automated approach to cloud identity management when he joined the company and encountered a complex environment of excessive permissions, shared accounts, and manually managed identities. By deploying Sonrai’s Cloud Permissions Firewall, Horsman spearheaded a transformation in their AWS environment by automating least privilege management, creating a secure, agile cloud infrastructure.
“Sonrai enabled us to automate identity management and achieve the least privilege across our AWS environment in days instead of months,” said Horsman. “With Sonrai’s automation, we could focus on fixing excessive permissions and unused identities without disrupting developer workflows.”
Addressing Cloud Security Challenges
Global Atlantic’s cloud infrastructure faced several security challenges, including full administrator access for developers, reliance on access keys for processes, and a lack of consistent visibility and governance. Horsman initially implemented role-based access control (RBAC), automated remediation, and Service Control Policies (SCPs) to establish security protocols. Still, these manual methods proved insufficient for cloud permissions management’s scale and dynamic nature.
After evaluating various solutions, Global Atlantic selected Sonrai’s Cloud Permissions Firewall for its ability to provide automated and continuous enforcement of least privilege. Sonrai’s platform integrates seamlessly with AWS, proactively identifying excessive permissions and unauthorized access while providing real-time feedback via ChatOps integration.
“Sonrai’s solution has helped us reclaim 6 months of development time that would have been spent on manual permission adjustments and coding fixes,” Horsman noted. “Our team was able to quarantine inactive identities and address unused permissions quickly, minimizing security risks and providing instant insights to developers.”
Outcomes and Benefits
With Sonrai Security’s Cloud Permissions Firewall, Global Atlantic achieved:
- Reduced Resolution Time: Cut the time to address permissions issues from six months to six days.
- Automated Least Privilege Enforcement: Minimized manual intervention and human error.
- Streamlined Compliance: Provided a clear audit trail of identity and permissions adjustments.
- Enhanced Collaboration: ChatOps integration helped the security and development teams address permissions conflicts in real-time without compromising productivity.
“What would have taken months, we were able to do within days,” Horsman added. “The ChatOps functionality was incredibly valuable, providing instant response to developer requests.”
Brendan Hannigan, CEO & Co-Founder of Sonrai Security, emphasized the transformational potential of the Sonrai Cloud Permissions Firewall, stating, “Our solution drives impactful results by swiftly reducing the attack surface, saving cloud teams valuable months of time, and ensuring a seamless workflow for developer requests for cloud permissions access.”
Looking Ahead
Global Atlantic plans to continue leveraging Sonrai’s platform to maintain the least privilege, further reducing risk and enhancing its cloud security strategy. With Sonrai’s automation capabilities, Global Atlantic is poised to support a secure, scalable cloud infrastructure that prioritizes security and efficiency.
About Sonrai Security
Sonrai Security offers cutting-edge solutions in cloud identity and access security, including the Cloud Permissions Firewall, to help organizations achieve secure, automated least privilege enforcement across multi-cloud environments. Sonrai’s platform enables organizations to reduce risk, improve security posture, and streamline compliance.
For more information, please visit www.sonraisecurity.com.
About Global Atlantic Financial Group
Global Atlantic Financial Group provides a wide range of retirement and life insurance solutions. The company leverages AWS cloud technologies to optimize its infrastructure with an operational philosophy centered around security and efficiency.
