Securing Web Applications and Achieving Compliance at Scale with Tevico for Climate Intelligence Platform

About Customer

The Climate Intelligence Platform is a leading climate-tech solution that harnesses remote sensing, environmental science, and machine learning to support forestry and agriculture initiatives focused on climate change mitigation and resilience. Backed by renowned academics and industry experts, the platform serves top-tier clients in the carbon market. As a pioneer in environmental intelligence, it delivers high-precision insights that enable sustainable land use and ecological stewardship. Its advanced technologies empower better decision-making across global agricultural and forestry landscapes.

Challenges

As the Climate Intelligence Platform expanded its AWS footprint, strengthening cloud security and maintaining continuous compliance became critical. With limited in-house tooling, the team needed a streamlined solution to enforce cloud governance, gain real-time visibility, and manage security risks effectively. Additionally, with increasing exposure to the internet, securing their web applications against evolving cyber threats became a priority. The team needed a robust Web Application Firewall (WAF) solution to monitor, analyze, and protect against sophisticated attacks such as SQL injection, cross-site scripting (XSS), and malicious bot traffic.

Solutions

To reinforce its security posture and align with compliance goals, the Climate Intelligence Platform adopted Tevico, a cloud-native platform designed to enhance security, visibility, and compliance across multiple AWS accounts.

1. Security Standards Evaluation with AWS Security Hub:

Climate Intelligence Platform leveraged AWS Security Hub, integrated via Tevico, to evaluate its environment against a comprehensive set of security standards, including:

AWS Foundational Security Best Practices v1.0.0, AWS Resource Tagging Standard v1.0.0, CIS AWS Foundations Benchmark v1.2.0, CIS AWS Foundations Benchmark v1.4.0, CIS AWS Foundations Benchmark v3.0.0, NIST Special Publication 800-53 Revision 5, PCI DSS v3.2.1, PCI DSS v4.0.1
Security Hub provided deep visibility into potential misconfigurations, permission gaps, and compliance risks. Findings were systematically organized by severity (Critical, High, Medium, Low, Informational) and by status (Passed, Warning, Failed), enabling the security team to prioritize remediation efforts effectively. Tevico complemented this by offering automated remediation guidance and tracking improvements over time. This helped the Climate Intelligence Platform team focus on risk reduction and governance without requiring extensive manual intervention, optimizing their compliance workflow.

2. Real-Time Risk Monitoring & Reports:

Climate Intelligence Platform accessed interactive dashboards for real-time visibility into their security posture. In addition to live updates, Tevico delivered:

Weekly and Quarterly Security Reports: Regular reports to track security trends and identify areas of concern.
Daily Reports On Demand: Generated based on user-provided inputs and preferences, with findings automatically updated each time a report is generated.
Detailed Check-by-Check Evaluations: Tevico performs thorough assessments of each security parameter and presents the findings in an intuitive dashboard. Each finding includes key details such as the title, description, creation timestamp, affected resource types, severity level, and the specific AWS account ID, ensuring complete visibility and actionable insights across the environment.
Downloadable PDFs: Provided for audit and compliance records, making it easier to share and store for regulatory purposes. .

This ensured that the platform maintained a strong security posture and was always audit-ready, which is essential for enterprise clients and regulated industries.

3. Web Application Firewall (WAF) Protection

To enhance the security of its web applications, Climate Intelligence Platform utilized Tevico’s integrated WAF analytics, which builds on AWS WAF by offering deeper visibility and actionable intelligence. Tevico delivers a streamlined interface with clear visual dashboards, helping the Climate Intelligence Platform team quickly interpret and act on threat data.

Tevico provided the Climate Intelligence Platform with organized visualizations across key WAF metrics, including:

Executed WAF Rules, Requests Distribution, Requests Allowed/Blocked/Counted by WAF Rules, Global WAF Requests, Bot vs. Non-Bot Requests, Requests by HTTP Version and Methods, OS Source Requests Statistics, and Top Hosts. These insights enabled the team to efficiently detect anomalies, understand traffic behavior, and fine-tune WAF rule sets
Real-Time Log Analysis: Tevico continuously parsed and analyzed WAF logs, flagging suspicious activity and enabling the Climate Intelligence Platform security team to respond swiftly with contextual data at their fingertips.
Protection from Web Vulnerabilities Tevico’s WAF solution safeguarded the Climate Intelligence Platform against:
SQL Injection
Cross-Site Scripting (XSS)
Malicious bots and automated threat vectors
Actionable Traffic Intelligence With Tevico’s enhanced analytics, the Climate Intelligence Platform was able to:
Visualize traffic origin using IP/geolocation data
Monitor HTTP request behavior to identify threat patterns
Distinguish bot traffic from real users for better traffic management

By leveraging Tevico, Climate Intelligence Platform transformed complex AWS WAF data into a secure, observable, and easily manageable defense layer for its digital infrastructure.

Benefits

Improved Security Visibility

Continuous evaluations and AWS Security Hub integration offered clear insights into risks and misconfigurations.

Risk Management

Tevico’s remediation guidance reduced manual efforts and streamlined governance.

Stronger Web Application Defense

Enhanced WAF analytics helped detect and block threats like SQL injection, XSS, and malicious bots.

Actionable Insights & Reporting

Real-time dashboards and customizable reports enabled quick responses and informed decision-making.

Related Case Studies

Optimizing Cloud Governance, Security, and Cost Visibility for Oral Health Platform Using Tevico

Oral Health Technology Company is a pioneering firm transforming orthodontics through artificial intelligence. Their AI-driven platform delivers precise and personalized treatment plans …

Try Tevico for no hidden cost

We would love to help you monitor your AWS account to save cost, time and effort.