Eramba approached us to help them move their GRC solution to a cloud-based SaaS offering on AWS. Like many organizations, they were facing a challenge with their old legacy software, realizing they don’t have the capacity to innovate on their own. Our main goal was to enable Eramba’s ability to scale their solution more efficiently and turn it into a multi-tenant solution.
The Client
Eramba is a company that offers a risk management software solution, known as GRC (Governance, Risk, and Compliance). A solution for teams to run compliance (ISO, NIST, SOCx, Etc), risk, incident, project, exception, policy, and control management, among other things. With over a decade of history, this simple, affordable, open software used by organizations around the world has become a very popular GRC option.
Challenge
As with any other migration, we faced a number of challenges at once. Firstly, there was the need to make as few changes as possible to Eramba’s existing application codebase, the old legacy software. This was important because their team wasn’t equipped to handle major changes to the codebase and didn’t have the capacity to innovate on their own, since they had no internal DevOps engineers at hand.
Another issue on the table was the inability of their software to scale fast enough, as they could only onboard a limited number of tenants per month due to the tedious onboarding process. So, how did we tackle this?
Tech Stack
- AWS EKS, Aurora, ElastiCache, WAF
- Crossplane, ArgoCD, Terraform, Helm
- Grafana, Prometheus,Thanos, Loki
What We Did
We were able to introduce custom automation using Crossplane to help with tenant onboarding, which allowed us to make the necessary changes to the application and streamlining their onboarding process without overwhelming Eramba’s team. The entire process from initial assessment, architecture rework and transformation took 7 months.