Awards and
Recognitions
Third Place
Columbia Venture Competition
Overview
Pixm is a serverless, multi-tenant, artificial intelligence based product providing real time phishing threat detection capabilities while browsing the web, for both individual and enterprise customers. Enterprise customers can sign up their organization and provision a separate environment for themself. Pixm platform is designed to rapidly identify visual branding as it appears on unauthorized login domains.
Phishing and related social engineering threats cost the private sector over $5–11B every year. Pixm is an advanced technology solution to this pressing issue that is designed to make web impersonation obsolete.
Phishing and related social engineering threats cost the private sector over $5–11B every year. Pixm is an advanced technology solution to this pressing issue that is designed to make web impersonation obsolete.
Concept to Enterprise
Numino Labs has taken Pixm from idea to enterprise-level in 18 months. Pixm is a large, multi-tenant enterprise software system designed to operate in a corporate environment such as business or government. Pixm is complex, scalable, component-based and distributed. Pixm is natively cloud supported, built using serverless technologies providing infinite scalability out of the box. Pixm is continuously evolving and adding new features, and supports all major browsers like Chrome, Edge and Firefox.
Numino Lab’s high-performance team of Product Delivery engineers, Product Delivery Leads, Product Architects and Delivery Owners are capable of working with CxO’s of any aspiring software enterprise.
Numino Lab’s high-performance team of Product Delivery engineers, Product Delivery Leads, Product Architects and Delivery Owners are capable of working with CxO’s of any aspiring software enterprise.
Category
Cloud Backend, Web Apps
Client
Pixm
Tags
- Azure
- Serverless
- Multi-tenant
- B2B
- NodeJS
- React
Awards and
Product Features
Multi-tenancy Database
multi tenancy with SQL Server Elastic Pool
Threat review system workflow
Workflow with end-users, Customer CISO Admin and Pixm Admin
Automated Customer onboarding
Completely Automated onboarding, processing & provisioning system
Serverless architecture
Infinitely scalable Serverless architecture
Endpoint protection
Chrome, Firefox, Edge Browser Extensions
Natively cloud-based
Product build ground up in the cloud
Queue Processor
Function App leveraging service bus(queues)
Authentication
Integration with Google Identity Platform for Authentication
Threat Intel
Integration with Google Web Risk for Threat Intel
Email notification system
Technology Stack
Product Delivery Technology Stack
- Versioning - GitHub
- Test Automation - Postman and JMeter for API testings
- Publishing - Chrome store, Firefox store, and Azure storage account
- Silent install using GPO on thousands of machine silently
- Agile using Google Spreadsheet and Documents
Architecture
Pixm leverages Azure and Google Cloud services for deployment, providing each tenant with individual databases in Azure SQL Elastic DB Pool for storing threat feeds generated by the user’s browser extension. Data ingestion happens through the extension and is processed and stored in a secure, scalable environment.
Data Ingestion
- The browser extension can be installed directly from Chrome, Firefox, and Edge web stores or deployed enterprise-wide using MSI.
- Upon installation, the extension registers with the backend, with all subsequent calls routed through an Application Gateway to the respective services.
- Live threat detection occurs when users visit pages with login controls, sending page details and screenshots to backend VMSS for processing.
Data Consumption
- The browser extension can be installed directly from Chrome, Firefox, and Edge web stores or deployed enterprise-wide using MSI.
- Upon installation, the extension registers with the backend, with all subsequent calls routed through an Application Gateway to the respective services.
- Live threat detection occurs when users visit pages with login controls, sending page details and screenshots to backend VMSS for processing.
Data Overview
- All services run serverless on Azure FaaS, ensuring scalability and maintainability.
- Threat Service: Integrates with Google WebRisk API for detecting non-zero day phishing attacks.
- Extension Service: Manages extension registration, heartbeat, threat detection, and more.
- Portal Service: Aggregates data for the React portal frontend.
- User Service: Wraps Google Identity platform APIs for user management.
Other Cloud Services
- Storage Account: Collects detected screenshot images.
- App Insight: Provides log tracing and backend analytics.
- Key Vault: Stores application or environment secrets.
- Automation Account: Automates customer provisioning.
- Google Identity Platform: JWT-based authentication for customer logins.
- Google WebRisk: Uses Google's threat intel database of phishing URLs.
Platform-Browser Compatibility
Automation (capabilities to exhibit)
Azure Services
Use of Azure Services (Powershell scripts, VMs, Storage Account) for complex scenario setups involving desktops & agent e2e lifecycle.
Web Test Automation
Use of selenium for web UI/extension test automation.
API Test Automation
Use of JMeter for performance and API test automation.
Product Screenshots
