Case Study: OFX strengthens microservices and API security with Fastly Next-Gen WAF

Microservices and API security for OFX’s International Wire Transfer Business

OFX, an international financial transfer platform processing over $22 billion annually, faced the challenge of securing its cloud-first microservices infrastructure. They needed increased visibility and protection against OWASP attacks and authentication abuse without taxing their engineering resources. To address this, OFX chose the Fastly Next-Gen WAF to gain deep application visibility and automatically block malicious traffic.

The solution from Fastly Next-Gen WAF was deployed using lightweight agents, providing the OFX team with critical visibility into their APIs and microservices. By utilizing the platform's Power Rules, they aggressively blocked malicious authentication traffic with zero false positives. The implementation was quick and required no ongoing maintenance, effectively validating its effectiveness during penetration testing and ensuring the secure release of new code.

OFX

Richard Lane

Head of Security