A next-generation cloud-based privileged access management solution for Procyon

The challenge

Procyon takes on the challenge of managing privileged access to expanding on-premise and multi-cloud services, as just enough privilege (JEP) and zero standing privilege (ZSP) principles rise. The widespread use of cloud services and the blurred line between privileged and standard users make privileged accounts hard to manage. A more granular set of resource credentials is needed, meeting strict security requirements and expiring after use. Procyon uses biometric technology and TPM cryptography to establish continuous authorization for DevOps teams in multi-cloud development environments.

What makes privileged access hard:

• Widespread use of cloud services.
• Blurred distinctions between privileged and standard users.
• Credentials that must be granular, meet strict security requirements and expire after use.

What we did

• Provided backend services to help the Procyon team create its privileged access management software, the company’s flagship product.
• Built discovery of user services in three major cloud providers: AWS, GCP and Azure.
• Built just-in-time access to resources.
• Built approval requests to be accepted by an account administrator.
• Built a risk assessment tool that prevents credential and privilege sprawl.

How it works

The software covers the path from finding a resource to granting access to it, and keeps watch over the permissions granted.

1. Discovery User services are discovered in the three major cloud providers: AWS, GCP and Azure.
2. Just-in-time access Access to resources is provided just in time, without passwords, shared accounts or static credentials.
3. Approval Access requests go to an account administrator to accept, and sessions are terminated immediately in case of suspicious activity.
4. Risk assessment Risk analysis runs automatically for all permissions granted to all resources across the multi-cloud infrastructure, preventing credential and privilege sprawl. Complete visibility into every deployed resource, user access and policy helps meet compliance requirements.

In the client’s words

In the fast-paced world of startups, gathering user requirements and keeping up with the latest technologies is crucial for success. However, implementing these solutions requires a skilled engineering team. Procyon has partnered with CodiLime to gain top-notch engineering talent, and we have been impressed with the quality of their work and the dedication of their team. CodiLime team has helped us meet the customer needs quickly and effectively. This collaboration has been cost-effective and it has also allowed us to scale up our team seamlessly. Thank you, CodiLime team, for your contribution to our success!

Sukhesh Halemane, Co-Founder, Procyon.ai