Paidy improves security posture and accelerates PCI readiness with Sumo Logic

• 

  Challenge

  With more than 5.0 million accounts and rapidly growing, Paidy is Japan’s pioneer and leading Buy Now Pay Later (BNPL) service with the mission to spread trust through society and give people room to dream. Paidy offers instant, monthly-consolidated credit to consumers by removing hassles from payment and purchase experiences. With a user-friendly app supported by the Paidy platform, user purchases are optimized for mobile and instant-checkout. For Paidy to understand how the platform and its infrastructure are performing, logs play a key role; however, the process of managing the logs to monitor and analyze the company’s environment and platform performance was inconsistent across systems

  “Sometimes, an inquiry could take a while and required looking at different log sources across more than 60 locations. We wanted to improve our log management to make it faster and easier to gain the visibility across our environment and get the desired information we need,” said Joseph LeRoy, Security Engineer at Paidy.

• 

  Solution

  In pursuit of a solution that would help the company centralize logs and provide a data-driven approach for security and compliance monitoring, Paidy’s CISO, Felix Beatty, recommended that the security team adopt a SIEM solution that addresses their needs.

  Paidy adopted Sumo Logic’s cloud-native continuous intelligence solution. The Sumo Logic platform ingests and analyzes data from Amazon Web Services (AWS) accounts, on-premises systems, as well as Paidy’s product platform. As part of this undertaking, the organization gained centralized log analysis and visibility with customized dashboards to address precise needs, including Sumo Logic’s PCI apps to support Paidy’s regular PCI audit process.

• 

  Results

  With several use cases to enable, Paidy took advantage of Sumo Logic’s native integrations with the company’s various AWS services and other infrastructure investments, as well as the out-of-the-box applications to create desired dashboards.

  • Reduced daily log review time from hours to minutes with Sumo Logic’s automation
  • Accelerated resource time and effort by 60% to obtain PCI certification
  • Improved security posture with real-time visibility and insights across the company’s infrastructure