Intuition Systems chose SecureSphere for its unique ability to provide integrated web application protection and database security.

Intuition Systems processes tens of millions of check and web-based electronic payments annually for government, utility, insurance and medical clients. The company accepts and processes ACH and credit card payments on behalf of its customers, and as such is required to comply with PCI merchant requirements for securing payment cardholder information. However, because Intuition Systems specializes in customizing individual applications for each of its customers, performing multiple secure code assessments was a significant challenge. Especially, since application code changes over time. As a result, the company chose to deploy a Web Application Firewall (WAF) which is an alternative method to code vulnerability assessments under PCI.

After a thorough evaluation, Intuition Systems selected the Imperva SecureSphere WAF over Netcontinuum's offering. The company selected SecureSphere for its ease of deployment, automated policy creation (known as dynamic profiling), and ability to monitor and block unauthorized database activity.

"Deploying a Web Application Firewall was the most efficient and cost effective solution for us to comply with the PCI Data Security Standard," said Jean-Pierre Zaiter, CIO for Intuition Systems. "SecureSphere was the easiest product to deploy and configure, and delivered the best performance in our tests. When we learned about its ability to also monitor and protect databases, we expanded our project scope and deployed this functionality as well. With Imperva we have a complete solution for data security and PCI compliance."

"For companies like Intuition Systems that have deployed customized web applications, deploying a web application firewall is the most practical and logical path to PCI compliance," said Jim Drill, vice president of worldwide sales for Imperva. "In addition to Web application protection, SecureSphere prevents unauthorized data extrusion by monitoring database activity and enforcing usage control policies based on user and application profiles it creates."