Elo: Securing Growth in Brazilian Payments
Elo is a Brazilian payment technology company operating in one of the most critical and regulated environments in the financial sector. “Our mission is to promote digital inclusion in payments with security, resilience, and innovation,” says Rodrigo Godoi, CISO. The company runs a multicloud environment across Azure, AWS, and OCI, supporting card platforms, tokenization, fraud prevention, and data services.
For Rodrigo, security underpins that mission rather than limiting it. “For us, security is not an obstacle,” he says. “It is a strategic business enabler.”
The Challenge: Visibility Across a Growing Multicloud Footprint
As Elo scaled, its integrations and APIs multiplied fast, and visibility didn’t keep pace. “We were growing fast. Our integrations were increasing. Our APIs were multiplying,” Rodrigo says. “In a dynamic multicloud environment, fragmented visibility means invisible risk.”
The challenge was clear: Elo needed continuous, centralized visibility into its security posture across Azure, AWS, and OCI. That meant reducing risk from misconfiguration, protecting sensitive data and critical APIs, and managing identities with excessive privileges, all while maintaining compliance with standards like PCI DSS.
Why Elo Chose Orca
Elo brought in Orca Security in partnership with Oplium, drawn to a platform that is fully agentless and delivers genuine coverage across Azure, AWS, and OCI without adding operational complexity. The value became clear from the earliest stage of evaluation. “Since the proof of concept, we have gained something essential: context,” Rodrigo says. “We began to correlate configurations, identities, vulnerabilities, and sensitive data in a single view. This changed our ability to prioritize risks with real business impact.”a won on the merits.
Implementation: Fast, With No Disruption
Deploying Orca across Elo’s multicloud environment came with no operational downside. “Implementation was quick and had no impact on operations,” Rodrigo says. “This is critical in a payments company, where availability and continuity are non-negotiable.”
Results: From Fragmented to Integrated
With Orca in place, Elo consolidated its view of risk into a single console. “With a single console, we reduce noise and increase efficiency,” Rodrigo says. “We gain visibility, agility, and better risk prioritization.”
Orca gave Elo centralized multicloud visibility, a reduction in critical risks, prioritization based on business impact, and stronger operational efficiency and compliance support. “We overcame the challenge of viewing our multicloud environment in an integrated way,” Rodrigo says. “Today, we are able to innovate safely and without creating barriers.”
The shift extended to how Elo’s security team operates day to day. “As our environment evolves, so does our ability to anticipate and respond to risks,” Rodrigo says. “Security is no longer reactive. It has become preventive and risk-oriented.”
A Strategic Part of Elo’s Cloud Journey
Adopting Orca marked a turning point in how Elo approaches security, not as a gate to slow the business down, but as the infrastructure that lets it move faster with confidence. “Our goal is to sustain innovation responsibly,” Rodrigo says. “Orca Security has become a strategic part of our journey toward cloud maturity. With visibility, context, and governance, we continue to grow securely.”
That shift, from fragmented visibility to integrated context, from reactive fixes to preventive risk management, reflects where Elo wants to be as a company: growing across clouds without growing blind. As Elo’s multicloud footprint continues to expand, Orca remains the layer that keeps that growth secure by design.
Chat with an Orca Expert