Sandis secures 27 apps and 5,000 users with Secfense

Implementation of User Access Security Broker in the WAGAS group 01

Sandis Case Study

Sandis selected and implemented the Secfense solution in the WAGAS Group to quickly secure 27 different applications and over 5,000 users and to implement the recommendations of the Polish Financial Supervision Authority and implement the requirements of the Digital Operational Resilience Act (DORA) regulation.

Sandis is an integrator and software supplier for the insurance industry. Offers software for the distribution of insurance products, and also provides infrastructure management and application development services. The Sandis application is used every day by thousands of insurance product sellers, and the solutions offered support the handling of many nationwide contacts.

Implementation of User Access Security Broker in the WAGAS group 03

One of the pillars of the company’s strategy is to provide recipients with a high standard of security for the data they process. That’s why Sandis is paying a lot of attention to new cybersecurity requirements, especially those imposed on the entire industry.

The Polish Financial Supervision Authority (UKNF) recommendations and the DORA regulation and strong authentication

On October 19, 2022, the position of The Polish Financial Supervision Authority (UKNF) on the activities of insurance and reinsurance companies in the field of cybersecurity was published. The Commission Office emphasizes that “in the face of intensified activities of cybercriminals, not using strong, multi-factor customer authentication is an unacceptable risk.”

Additionally, on January 16, 2022, the DORA (Digital Operational Resilience Act) regulation entered into force, which is part of the European Union’s cybersecurity strategy. Companies and institutions have until January 17, 2025 to adapt to the new regulations. And these regulations, which also cover external ICT service providers to entities operating in the financial industry, require the implementation of policies and protocols for strong authentication mechanisms as part of ICT risk management.

Sandis situation before implementation

Due to these requirements, Sandis cooperates with the WAGAS group faced the challenge of securing both the applications it offers and those of external suppliers. Sandis decided to introduce additional protection in the form of multi-factor authentication mechanisms based on FIDO, so that application users can log in safely, avoiding popular cyber threats – phishing, account takeover and theft of their own and customers’ data.

The project was hampered by the multitude of systems, diversity of technologies and age of some applications. As part of the pre-implementation analysis, the company verified that users use very different client platforms: desktop computers, laptops, tablets, smartphones and traditional mobile phones. Each of these devices differs in technological advancement and functions, as well as in the level of security.

Solutions provided to thousands of users in the WAGAS Group are hosted in three data centers. And they are used by many thousands of users:

  • 3 data centers
  • over 27 applications
  • DA 1 – 14 applications
  • DA 2 – 4 applications
  • DA 3 – 9 applications

Main challenges:

  • various technologies
  • many suppliers
  • applications at various stages of the development cycle, currently being developed and maintained, those being phased out and those “retired”
  • providing an MFA solution that has a standardized look and feel

Choosing a solution

Sandis took into account two different operating scenarios – the implementation of MFA mechanisms within individual applications and the use of a centralized, unified solution such as Secfense.

Secfense provides the User Access Security Broker solution, which allows you to quickly apply strong authentication to any system and application, without interfering with their code.

Sandis made his choice by analyzing TOC – Total Cost of Ownership, i.e. the full picture of costs„from purchase to withdrawal. The key elements analyzed include:

  • CAPEX – expenditure
  • OPEX – maintenance, development
  • hidden costs: downtime, loss of productivity, peer support

The company took into account, among other things:

  • development in the life cycle
  • maintenance
  • administration
  • costs of lack of coherence
  • training
  • call center service
  • helpdesk service

A comparison of the costs of both scenarios (scenario A – organic implementation and scenario B – implementation of User Access Security Broker) left no doubts about the greater profitability of using the Secfense solution. Implementing MFA security at the level of each application individually would be too expensive, time-consuming and difficult to maintain.

Implementation of User Access Security Broker in the WAGAS group 02

Other important features of the Secfense solution

Sandis also noted other features of User Access Security Broker:

  • allows you to implement strong authentication mechanisms on many applications in a few weeks
  • does not require any modification to the code
  • allows any second factor of authentication to be used

In addition to FIDO, a dedicated mobile application and one-time passwords generated by applications such as Authenticator, Sandis also provides the option of authentication using codes available on all client devices sent via SMS or e-mail.

Implementation process

Already in the first stage of implementation, Sandis secured 11 of its applications, and ultimately provided security for 27 applications hosted in three different data centers.

The speed and ease of implementing User Access Security Broker allowed Sandis to skip the Proof of Concept stage. The company’s team found that the simple implementation and licensing method based on a subscription containing, among others, support allows you to immediately move to the implementation and production stages.

Effect of implementing User Access Security Broker

Sandis very quickly provided modern protection to over 5,000 users. Today it is fully prepared to secure subsequent applications and ensure compliance with European Union regulations and the recommendations of the Polish Financial Supervision Authority.

Antoni takes care of all the marketing content that comes from Secfense. Read More


We are faced with new challenges every day. We must always be one step ahead of the attackers and know what they are going to do before they do it. We are convinced that the User Access Security Broker will bring security to a new level, both for those working at the office and from home. For us, working with Secfense is an opportunity to exchange experience with developers who put great value on out-of-the-box thinking.

Krzysztof Słotwiński

Business Continuity and Computer Security Officer

BNP Paribas Bank Poland

As part of the pre-implementation analysis, we verified that users utilize a wide range of client platforms: desktop computers, laptops, tablets, smartphones, and traditional mobile phones. Each of these devices differs in technological advancement, features, and level of security. Because of this, and also due to the recommendation of the Polish Financial Supervision Authority (UKNF), we decided to introduce additional protection in the form of multi-factor authentication mechanisms based on FIDO. As a result, users of our applications can log in safely, avoiding common cyber threats such as phishing, account takeover, and theft of their own and their clients’ data.

Marcin Bobruk



We are excited to partner with Secfense to enhance our user access security for our web apps. By integrating their User Access Security Broker, we ensure seamless and secure protection for our applications and systems, delivering superior security and convenience to our customers.

Charm Abeywardana

IT & Infrastructure

Visium Networks

Before investing in Secfense, we had the opportunity to talk to its existing clients. Their reactions were unanimous: wow, it’s so easy to use. We were particularly impressed by the fact that implementing their solution does not require the involvement of IT developers. It gives Secfense a huge advantage over the competition, and at the same time opens the door to potential customers who so far were afraid of changes related to the implementation of multi-factor authentication solutions.

Mateusz Bodio

Managing Director


Even when the network and infrastructure are secured enough, social engineering and passwords can be used to gain control of the system by attackers. Multifactor authentication is the current trend. Secfense addresses this and allows you to build zero trust security and upgrade your current systems to passwordless applications within minutes, solving this problem right away,” said Eduard Kučera, Partner at Presto Ventures and cybersecurity expert – former Director in hugely successful Czech multinational cyber security firm Avast.

Eduard Kučera


Presto Ventures

One of the biggest challenges the world is facing today is securing our identity online. That’s why we were so keen to have Secfense in our portfolio. They make it possible to introduce strong authentication in an automated way. Until now, organizations had to selectively protect applications because the deployment of new technology was very hard, or even impossible. With Secfense, the implementation of multi-factor authentication is no longer a problem, and all organizations can use the highest standards of authentication security.

Stanislav Ivanov

Founding Partner

Tera Ventures

Two-factor authentication is known to be one of the best ways to protect against phishing; however, its implementation has always been difficult. Secfense helped us solve that problem. With their security broker, we were able to introduce various 2FA methods on our web applications at once.

Dariusz Pitala

Head of IT