Engagements

All client names anonymized to a size + industry + region pattern. Vendors named because they are the technology, not the client. Architectures, approaches, and lessons learned are real. Click into any case to see the interactive diagram.

Financial Services2025

Replacing Legacy SSO with Okta at a $5B Singapore Fintech

Fragmented authentication across 47 applications, four identity stores, and persistent shadow-IT risk. MAS TRM audit had flagged the lack of unified IAM as a critical finding.

OktaActive DirectoryCloudflare Access
8 monthsRead →
Insurance2024

Zero Trust Rollout for a Top-3 Hong Kong Insurer

The insurer was running a flat network with implicit trust between data centres, branch offices, and a growing remote workforce. A 2023 internal red-team exercise had achieved domain admin in 4 hours.

CloudflareBeyondTrustOkta
11 monthsRead →