Jack Kleeman

We recently finished a major networking project which let us control internal traffic in our platform. And we've been thinking about how we can add similar security to network traffic leaving our platform.

Our security team at Monzo are working towards a 'zero trust' cluster, where an attacker inside our cluster would have no power.

We use Vault for secret management and credential issuance, and we've always configured it with the Cassandra storage backend. To help us scale, we moved to the S3 backend. But it was crucial we kept Vault available.

We've been working on isolating the 1,500 services that power Monzo. The sheer size and complexity of our platform made this difficult. But by protecting us against compromised services, it makes Monzo more secure.

We recently designed a new system to manage secret information safely – from the keys that we use to sign your Mastercard transactions, to credentials for external services.

OpenVPN is great, but there were some things we wanted to change.

A lot of Monzo engineers don't have technology degrees. Here's their advice for budding developers.

We held an internal hackathon to improve some of the oldest code in the bank! Here’s why that’s good for our engineers and our customers.