Case Study: SentryBay achieves PCI compliance and continuous security with SoftwareONE SIEM services

Building a Security Information and Event Management System (SIEM) for SentryBay

SentryBay, a UK-based information technology company serving highly regulated financial customers, needed to keep its AWS environment PCI compliant and secure 24/7/365. To address this challenge, SoftwareONE provided its Managed Security & Compliance Services, including a Security Information and Event Management System (SIEM) built on ElasticSearch and Kibana.

SoftwareONE implemented an ELK-based SIEM integrated with AWS Security Hub and fed by CloudTrail, Amazon Inspector, EC2 Systems Manager Logs, RDS logs, and CloudWatch, along with custom compliance rules and automated remediation for issues like open vulnerable ports or disabled CloudTrail. The solution also generated PCI audit dashboards and exported them to S3 on a schedule, helping SentryBay reduce SIEM storage costs, simplify audits, and successfully pass its PCI compliance audit while staying continuously secure and compliant.

SentryBay

Andrew Aitken-Fincham

Senior Web Developer