How Iress Optimized Global DevSecOps with JFrog: Scaling Compliance, Security & Efficiency
| DevSecOps Scaled Globally | Seamless Cloud Migration | Enhanced Security & Compliance |
| Iress, a global leader in financial software solutions, sought to modernize its development infrastructure by migrating from a self-hosted package management system to a SaaS-based solution. With a presence in seven countries and a diverse technology stack, Iress faced challenges in managing multiple package managers, ensuring compliance with evolving regulations, and optimizing engineering resources. By partnering with JFrog, Iress successfully transitioned to a cloud-based artifact management and DevSecOps platform, enhancing operational efficiency, security, and visibility across its software supply chain. |
ABOUT IRESS
Iress has been at the forefront of financial software innovation for over three decades. The company provides critical solutions for financial market trading, wealth management, and superannuation.
Serving 90% of Australia’s top 30 brokers, Iress operates across Australia, the UK, Canada, Tunisia, Singapore, New Zealand, and South Africa, delivering robust technology platforms to a wide range of financial institutions.
CHALLENGES
As Head of Engineering Services, Glenn McDonald oversees Iress’ development platform, ensuring seamless integration and deployment of various software solutions. His team manages the entire toolchain, from JFrog products to GitHub and deployment technologies, ensuring smooth and secure software delivery.
Iress had been using JFrog Artifactory for over seven years, initially deploying a self-hosted solution. However, as the company expanded and business needs grew, maintaining an on-premise deployment became increasingly challenging. Engineering teams faced constraints in managing upgrades, ensuring availability, and meeting stringent regulatory requirements like Australia’s CPS230 compliance standards.
SOLUTION
To address these challenges, Iress made a strategic decision to transition to JFrog’s SaaS-based solution, hosted on AWS. The key drivers for this migration included:
- Resource Optimization: Reducing the operational burden of maintaining Artifactory internally and reallocating engineering talent to high-value business initiatives.
- Regulatory Compliance: Meeting stringent RTO and RPO metrics for data recovery and security mandates.
- “With JFrog’s security and compliance capabilities, we can confidently demonstrate to regulators and financial institutions that our software processes are audit-ready.” – Glenn McDonald, Head of Engineering Services at Iress
- Enhanced Visibility & Control: Leveraging MyJFrog Portal to provide business units with granular cost insights and optimize artifact management.
- Improved Security Posture: Strengthening governance by ensurance full traceability of software artifacts from development to production.
- Federated Hybrid Deployment: Iress integrates its self-hosted Artifactory instances with JFrog’s SaaS through federation, ensuring synchronization across deployments while allowing teams to transition workloads gradually.
- Cross-Region Replication: Leveraging AWS’s global infrastructure to support disaster recovery and enhance compliance in multiple regions.
- JFrog Xray for Security Scanning: Ensuring all artifacts stored within AWS are continuously scanned for vulnerabilities, enabling proactive risk management before deployment.
By working closely with JFrog’s local team in Australia, Iress executed a seamless migration strategy, replicating its on-premise Artifactory setup in the cloud to minimize disruptions. The transition included integrating SaaS nodes with existing self-hosted instances through federation, enabling synchronization across deployments, carefully orchestrated to maintain service continuity and leverage AWS’s infrastructure for scalability and resilience.
RESULTS
By adopting JFrog’s SaaS platform, backed by AWS, Iress has achieved a future-ready DevOps infrastructure that enhances efficiency, security, and governance. The strong collaboration between JFrog and Iress, along with AWS, has paved the way for continuous innovation, ensuring that Iress remains a leader in delivering secure, scalable, and compliant financial software solutions.
Key benefits include:
- Operational Efficiency: Eliminated the overhead of self-hosted maintenance, freeing engineering teams to focus on innovation.
- Cost Optimization: Improved visibility into software consumption patterns, reducing unnecessary artifact storage and operational costs.
- “With JFrog, we’ve gained critical cost visibility across our business units, empowering teams to manage their consumption more effectively.”
- Scalability & Flexibility: Seamlessly scaled artifact management across global locations without infrastructure constraints.
- Robust Security Measures: Enabled software supply chain integrity by tracking artifacts throughout the development lifecycle.
- “Security is paramount at Iress, and the JFrog Platform plays a key role in ensuring our software supply chain meets the highest standards.”
- Regulatory Readiness: Streamlined compliance with SOC2 standards, providing auditors with easy access to security documentation.
- Risk Mitigation: Enhanced artifact traceability, reducing exposure to security vulnerabilities and compliance risks.
We invite DevOps and Security professionals in financial technology to schedule a one-on-one demo or take an online guided tour and see how the JFrog Platform can transform your operations with advanced security, efficiency, and speed.
| “The JFrog Platform is one of the few solutions capable of addressing the complexity of our global operations, and the partnership has been transformative. The level of support, expertise, and strategic alignment we’ve experience has exceeded our expectations.” – Glenn McDonald, |
Products
The JFrog Platform, JFrog Artifactory, JFrog Xray
Partners
Additional Resources
White Paper: The Definitive Guide to Securing the Software Supply Chain
Solution Sheet: JFrog Artifactory
Case Study: Fintech Company Streamlines Software Supply Chain Management for Enhanced Security
