Profectus Capital improves critical access security to AWS workloads with Sectona

Case Study | 2 min. read

About Profectus Capital

Industry Quasi-Government

Profectus Capital, is a systemically important non-banking financial services company registered with Reserve Bank of India. Based out of Mumbai, India, Profectus Capital offers Term Loans and Working Capital Loans for Manufacturing and Service Sectors. Profectus Capital also provides Supply Chain Financing solutions for Dealers in segments like Pharmaceuticals, Consumer Durables, Automobiles among others.

Profectus Capital presently lends to Eleven Clusters across 15 Branch locations and is working towards become lending partner of choice for thousands of SMEs operating in the country.

Challenge

Profectus Capital believes in leveraging technology and data science to make processes quicker and lending decisions faster. Making good of this vision, Profectus is a cloud-first company with its complete infrastructure hosted over Amazon Web Services (AWS). With an aim to be a leading lender for SME and MSME segments, prioritizing security framework across its cloud resources and access is their prime responsibility. The security post would not be complete without addressing the risks involved with user access. The Infrastructure and Security team at Profectus identified key priorities of managing and securing user access:

Managing and securing privileged account access to AWS workloads
Securing SSH key based access authentication
Monitoring and controlling third party vendor access to critical resources on AWS

Solution

Sectona provided a simple and easy to use PAM solution that was built with a modern approach. Built-in vault provided by Sectona PAM mitigating dependency on third party external RDBMS components provides an important element of security, unlike others increasing PAM reliability and integrity. Sectona PAM helps Profectus achieve:

Increased governance around privileged account access by internal users and third party vendors alike
Enhanced security and SSH key management with built-in replication provided by solution’s embedded vault
Strong monitoring with risk-based session recordings and actionable dashboard insights

Benefits

Living up to its technology powered innovation and processes, Profectus Capital is able to achieve compliance with RBI security guidelines by implementing Sectona thereby building the right confidence, responsibility, integrity and transparency for its SME and MSME customer segments. Sectona’s automated approach to manage and secure internal and vendor user access to Profectus’ modern IT resources on AWS helps it focus its strengths on identifying technologies necessary to ease lending and maximize progress of the sector.

Sectona's PAM was one such solution we felt was truly built with a cloud focused approach in mind that is flexible yet robust in its approach

Suhas Kadam
Section Head - IT Infrastructure