From Hours to Minutes: Rapid Deployments and Robust Security for Digital Health Platforms

Client Background

The client is a leading insurance and healthcare platform specializing in digital solutions for group and individual policy enrollment, omnichannel benefits access, and financial and health wellness. Their offerings, designed with robust mobile capabilities, cater to the growing Gig Economy, providing highly personalized, consumer-centric member engagement.

The Challenges

The client, despite their success in delivering innovative digital healthcare solutions, faced several operational challenges that impacted productivity, security, and efficiency. Manual deployments, cumbersome rollbacks, and security gaps slowed their processes, while development inefficiencies and a lack of modern tools further hindered their team’s productivity. Recognizing the need for a streamlined approach, Xoriant stepped in to address these issues and drive operational improvements.

Xoriant identified these challenges and formulated a strategy to tackle them:

• Manual Deployment: Deployments across over 20 customer sites were time-consuming, requiring 4-5 hours of manual effort per site, including complex database changes.
• Complex Rollback Process: The rollback process was highly labor-intensive, involving multiple manual checkpoints that made it slow and prone to errors.
• Security Gaps: The absence of automated security checks, such as Static and Dynamic Application Security Testing (SAST/DAST), left the applications exposed to potential security risks during deployment.
• Development Inefficiencies: Developers were required to download an entire 15GB repository, even when working on individual applications, significantly slowing down their workflows.
• Lack of Developer Tools: The on-premise SVN repository lacked modern tools, further impeding productivity and collaboration among the development team.

Xoriant saw an opportunity to streamline these processes and enhance the platform’s performance through strategic modernization.

Xoriant Solution

Leveraging our deep expertise in cloud technologies and CI/CD automation, Xoriant designed and implemented a comprehensive solution that included:

Business Benefits

Xoriant's intervention successfully addressed the client’s operational challenges, resulting in a transformative impact on their deployment processes and overall productivity. Some of the incredible business outcomes the client experienced include:

• SVN to GitHub Migration: The client’s on-premise SVN repository, containing over 90 applications, was migrated to GitHub Enterprise, a SaaS solution, enhancing version control and collaboration capabilities.
• CI/CD Automation: More than 25 Azure DevOps pipelines were developed to automate the deployment and rollback processes for various technologies, including .NET, Angular, ASP.NET, and Python. This significantly streamlined the deployment process.
• GitHub Advanced Security Management: Security practices were enforced at the code level, incorporating tools such as Dependency Graph, Dependabot, Dependabot alerts, and SonarQube for advanced code-level security. This proactive approach strengthened the platform's security posture.
• Repository Segmentation and Branching: The repository was restructured into environment-specific branches (Dev, QA, UAT, and PROD) to simplify code management. Release tagging and access control measures were also implemented for better governance.
• Automated Security Checks: The Azure DevOps pipeline was modified to integrate automated security checks, leveraging tools like Dependency Graph, Dependabot, and SonarQube, ensuring ongoing security monitoring throughout the development lifecycle.
• Code Obfuscation Consultation: Consultancy services were provided for implementing code obfuscation using the open-source tool ConfuserEx for select files, enhancing the security of sensitive code components.
  • 90% reduction in deployment time, enabling faster go-to-market and quicker updates across all sites using CI/CD pipelines.
  • 40% increase in developers’ efficiency, allowing more focus on core development tasks and faster product releases.
  • 70% Improvement in vulnerability management, leading to stronger security and reducing the risk of costly breaches or non-compliance fines.
  • 50% increase in scalability efficiency, allowing the client to grow and customize services with fewer resources and faster deployment times.
  • 80% Reduction in operational labor costs, minimizing human errors and improving overall process efficiency.
  • 85% Improvement in rollback speed, ensuring faster and safer recovery from deployment issues, minimizing downtime, and improving service reliability.

This modernization not only strengthened their security posture but also positioned them to adapt swiftly to the evolving demands of the digital healthcare market, ensuring scalability and compliance for future growth. This partnership underscores the importance of leveraging modern technologies to drive efficiency and security in an increasingly competitive industry.

Technology Stack:

SVN, Azure DevOps, GitHub, Python, .NET, Angular, Android/iOS Mobile Applications, Microsoft Azure Cloud