PEXA enhances security for property transactions with IAM

๐กSee how fintech leaders balance strict security with frictionless UX in high-stakes environments.
โก 30-Second TL;DR
What Changed
Implementation of streamlined IAM for high-value transactions
Why It Matters
By optimizing IAM, PEXA reduces the risk of account takeover in property settlements. This approach highlights the importance of adaptive security in fintech applications.
What To Do Next
Review your application's IAM flow to ensure it meets modern security standards without hindering user conversion.
Key Points
- โขImplementation of streamlined IAM for high-value transactions
- โขFocus on balancing security friction with user experience
- โขSecuring sensitive financial workflows against unauthorized access
๐ง Deep Insight
Web-grounded analysis with 17 cited sources.
๐ Enhanced Key Takeaways
- โขPEXA is designated as a critical infrastructure provider, which mandates a significant uplift in its capabilities, including the integration of threat intelligence and enhanced resilience measures.
- โขPEXA has consolidated its Identity and Access Management (IAM) capabilities onto a single Okta platform, extending its use from internal workforce management to external customer access, and incorporating features like risk-based authentication and dark web monitoring.
- โขThe enhanced IAM system supports advanced security functionalities such as adaptive authentication, device posture assessment, API security at scale, and is designed to facilitate future passwordless access.
- โขIn the 2025 financial year, PEXA successfully defended against 6.5 million intrusion attempts, underscoring the persistent and high-volume cyber threats it faces.
- โขPEXA is launching 'PEXA Clear' in July 2026, a new solution developed in partnership with FrankieOne, aimed at simplifying Anti-Money Laundering and Counter-Terrorism Funding (AML/CTF) checks for property professionals to comply with new AUSTRAC regulations.
๐ ๏ธ Technical Deep Dive
- PEXA's IAM system is built on the Okta platform, which has been extended to manage both internal workforce and external customer identities.
- The IAM implementation includes risk-based authentication, dark web monitoring, and user password checking to enhance security.
- It supports advanced features such as adaptive authentication, device posture assessment, and API security at scale.
- Multi-factor authentication (MFA) is mandatory for all PEXA users, typically involving a password (something you know) and a mobile device via Okta Verify or SMS (something you have).
- PEXA employs breached password protection, checking user passwords against known compromised lists and prompting changes if a match is found.
- Digital certificates are used for electronic signing of documents within the PEXA platform, ensuring document integrity.
- The platform utilizes advanced encryption mechanisms to secure communications and protect sensitive data.
- PEXA has migrated to a cloud-native architecture and leverages AWS infrastructure for a multi-region disaster recovery design across Sydney and Melbourne, achieving a recovery time objective of less than four hours for major disruptions.
- Machine learning is integrated to automate identity and document checks, flagging potential errors or fraud in real-time.
- PEXA's platform is API-centric, utilizing microservices, and employs Palo Alto Networks' Prisma Cloud for cloud-native application protection (CNAPP) across hybrid and multi-cloud environments, including serverless workloads and API-driven microservices.
- Generative AI assistants have been integrated into PEXA's engineering workflows to accelerate problem-solving and feature delivery, including legacy Java upgrades.
- Verification of Identity (VOI) for network customers joining PEXA involves a two-step process: a face-to-face meeting with original documents and/or a Digital Verification of Identity via Livesign.
๐ฎ Future ImplicationsAI analysis grounded in cited sources
โณ Timeline
๐ Sources (17)
Factual claims are grounded in the sources below. Forward-looking analysis is AI-generated interpretation.
Weekly AI Recap
Read this week's curated digest of top AI events โ
๐Related Updates
AI-curated news aggregator. All content rights belong to original publishers.
Original source: iTNews Australia โ
