Like so many FinTech innovators, Greenlight has turned to containers and Kubernetes to enable rapid application development. It’s also turned to AWS to host many of its apps, so the company can focus internal resources on teaching financial literacy to the next generation.

1. Greenlight & StackRox
Our Technical Journey

2. Quick Poll:
your Kube journey

3. GREENLIGHT FINANCIAL TECHNOLOGY, INC
PROPRIETARY & CONFIDENTIAL.
EARN
SAVE
SPEND
GIVE
Who we are
Greenlight Helps
Parents Raise
Financially Smart Kids!
LEARN

4. They managed money. They saved.
$150+
MILLION MANAGED
$171
$161
$106
$66
19-22
15-18
11-14
5-10
They earned.
1.8
MILLION
CHORES
They cared.
What Greenlight kids accomplished in 2019
2.6
MILLION
$
What kids saved for:
Cars
College
Computers
Airpods
Christmas
Average amount saved by
age group
Set aside to give in 2019
$912
$784
$355
$164
19-22
15-18
11-14
5-10
Average amount managed
by age group

5. GREENLIGHT FINANCIAL TECHNOLOGY, INC
PROPRIETARY & CONFIDENTIAL.
How we got here
Greenlight Founded
New features and start shift to microservices
Greenlight 2.0
2014
2017
2018
2019 Focus on partner platform and microservice maturity
Platform for Partners
First Product to Market

6. GREENLIGHT FINANCIAL TECHNOLOGY, INC
PROPRIETARY & CONFIDENTIAL.
Greenlight growth and technology timeline
2018 2019 2020
Started down the path defining the GL platform
Started to get some scale with our microservices strategy
Additional compliance and security requests from partner offering
IncreasingImpact
ofvulnerabilities

7. Quick Poll:
your environment

8. GREENLIGHT FINANCIAL TECHNOLOGY, INC
PROPRIETARY & CONFIDENTIAL.
Greenlight application context
Payment
Processing
GL
Business
Logic
Vendor
Logic
Greenlight Data
Consumer
Apps
Customer
Service
App
Partner &
Vendor
Interfaces
Greenlight Backend
Application Code

9. GREENLIGHT FINANCIAL TECHNOLOGY, INC
PROPRIETARY & CONFIDENTIAL.
Tenant 1
Tenant 2
Greenlight deployment strategy

10. GREENLIGHT FINANCIAL TECHNOLOGY, INC
PROPRIETARY & CONFIDENTIAL.
Managed service vs managed expectations
IaaS PaaS SaaS
Security?
Managed by vendor Managed by you

11. GREENLIGHT FINANCIAL TECHNOLOGY, INC
PROPRIETARY & CONFIDENTIAL.
Summary
What we learned
- Managed service != SaaS
- Security is a shared responsibility
- Chose tools that fit need and strategy
What we like about StackRox
- Aligned with deployment strategy
- Aligned with organizational strategy

12. Quick Poll:
your security priorities

13. 13©2019 StackRox. All rights reserved.
So … how do we make all this a bit easier?

14. 14©2019 StackRox. All rights reserved.
Multi-factor risk profiling vs.
list of vulnerabilities
• test vs. prod
• running as root
• exposed to the Internet
• suspicious processes
Leverage Kubernetes context to prioritize risk

15. 15©2019 StackRox. All rights reserved.
Line-for-line details on which
controls are relevant to
containers and Kubernetes
Dashboard-level overview to
zero in on non-compliant
controls
Export detailed Excel of each
individual control test to meet
auditors’ demands
At-a-glance view of compliance

16. 16©2019 StackRox. All rights reserved.
Leverage k8s network policies
for segmentation
• See active vs. allowed
paths
• Auto generate updated
YAML
• Apply directly or via
DevOps processes
Automatically reduce the blast radius

17. 17©2019 StackRox. All rights reserved.
Next Steps
• Learn more about Greenlight!
• Check StackRox technical blog content
• EKS security best practices
• Kube config best practices
• How EKS vs. AKS vs. GKE stack up
• Highlights of latest Kube/Istio releases
• See Kube-native controls in action
• Request an online demo