Astrix Security’s Post

Transcript

Pagaya is a leading fintech company and the company actually created via a predictive AI, the ability to predict consumer capability to repay his debt by actually creating more and more features and understanding of whether he's able to repay not just via credit score, which is the common approach. By actually doing so, we realized that we can go to different fintechs and bank and create with them more financial opportunities to different consumers. Hey, I'm Yaniv Toledano. I'm the Global CISO of Pagaya. I've been here for the past three years and we started the journey with Astrix to really understand how nonhuman identities affect us. And we realize that for every human identity, we have probably around 10 times more non human identities. By doing so, we understood that it actually ties to all of our platforms, different application and without the real ability to do discovery and proper visibility, we will not be able to really grasp. The overall risk that a guy has a company is facing. And this was the early stage in the early understanding that we needed a platform that supports us. So non human identity is a big thing, but the understanding that every application today has multiple links with non human identities that can create scenarios where we actually provided wrong set of privileges when we don't have the clear visibility where we have potential threats or vulnerabilities that we're not even aware of. By actually understanding all of these aspects, that really leads us to the understanding that nonhuman identities is a major concern for us really realize that it's a major threat. And I think Astrix as a mindset around NHI allows you all of these free major aspects continuously adapt to the different and changing risk landscape, allowing you to understand what needs to actually take first as a mitigation action. And really the company helps us. And support us in understanding better how to face these different risks. We are now in a stage that we have the Genei landscape. We understand that Gen. AI is a very productive technology and we as a company that actually focus on AI, we realize the potential with Jenna, I obviously GenAI creates greater risks around the usage of non human identity. And definitely we need to be in control around that having the view of where people use. NHI today, what type of risks it posed to the company and what we need to do around all of our different platforms, whether it's Google, whether it's Snowflake, whether it's AWS or whatever the case is. This is something that is really crucial. If we won't have the visibility, discoverability and really understand what we need to do with that and take the necessary recommendation and remediation, then we're going to be in a very major problematic misconfiguration data breach that we don't want to be in. Because security is a place where you cannot count on anyone, but if you know that you can actually approach, receive the necessary support, understanding, helping hand when needed. And I see that the asterisk growing with us as we have our ecosystem growing more and more vision, team and technology. And I think Astrix has all three of them. And I'll definitely recommend ask this to my colleagues.