Customer Success Story

Thwarting Enterprise Data Breaches
IndustryCompanyTechnology – Software
Security

Polyverse is a software company based in Bellevue, WA thatprovides scrambled versions of Linux that are completely
impervious to zero-day attacks and buﬀer overﬂows before theexploits are even known. Polyverse has an internal mantra fortools and technology consumption, “you build it, you own it, yourun it” which ensures that Polyverse developers can bring any
new technology into the company so long as they take theresponsibility of maintaining it and ensuring its success. Thisapproach allows for a rapid incorporation of new technologies
that are proven and thereafter maintained by the team usingthem.

ProblemAllow the DevOps team toeasily manage multiple
programming languages andpackage types.

Results
 Accelerate build andrelease processes without
adding engineeringresources Improved build quality
 Easily scale as demand
increases
 Cost eﬃciencies with AWS

Product
JFrog Artifactory CloudEnterprise

Challenges
The ongoing challenge for Polyverse is managing cognitive load
(i.e. eﬀort required to learn new tools). Since Polyverse allows
their DevOps teams to bring in the best tools that will allow themto gain eﬃciencies and build software faster, they try andstandardize whenever possible. This allows more teams within
Polyverse to adopt its use; and thereby reduce much of thatcognitive load. As a smaller company, hosting their servers andinfrastructure in the cloud was a necessity and AWS was anatural ﬁt. Further, Polyverse runs a large amount of build jobs
per day, across a variety of Linux distributions, packages, andenvironments – so they needed tools that could scale & support
a diverse set of DevOps needs. The main challenge at Polyverse
was an ever-growing number of artifact builds, due to theirdependency on various package types and reliance uponDocker.

Results
JFrog Artifactory Enterprise was brought into Polyverse to solve the problem of managing a large
number of artifacts generated and consumed across programming languages and package types
used by the DevOps team including Go Lang and Node JS. Polyverse is Docker native, and Artifactory
enabled storage consolidation of all the images built. Polyverse builds a Docker image from every
commit of source code, across every branch, in each repository. If it exists in git, they build an imageout of it. With Artifactory Enterprise, the DevOps team at Polyverse was able to improve their build
deployment speed by several magnitudes; and the team experienced an improvement in build
accuracy with every code change. They could build and release faster without adding any newengineering resources. Polyverse went with hosted JFrog Enterprise, because they wanted tocompletely oﬄoad management. AWS was the right choice to help manage the costs and headache
associated with their required infrastructure at Polyverse (products used include AWS Batch, SQS,ECS and ECR primarily to run workloads). With AWS Batch, Polyverse can scale out their clusters ondemand, as jobs pile up. Additional services used to glue this all together include IAM, Cognito, andFargate, in a smaller capacity.
Polyverse serves Linux repos to the world, and every machine on the entire planet (that subscribesto Poylverse) gets its own private repo of the entire Linux package manager. Polyverse likes to thinkof themselves as the world's largest CI/CD pipeline because they are pulling from Linux sources,rebuilding and subsequently deploying continuously. This translates to about 200K container build
jobs in their queue at any given time, and each of the builds for every distribution are the core
images stored in JFrog Artifactory. Build clusters can range from 1500 nodes up to 5000 nodes atpeak, with about 100K jobs running on them in parallel, with queues of up to 1M jobs at peak.
Containers enable Polyverse to rapidly get deterministic environments at a moment's notice.
Without containers, each environment would require a separate VM, and the costs would be manyorders of magnitude higher.
This highly scaled eﬀort is built by 12 Polyverse DevOps engineers, who also manage the systemeﬀectively and easily.

“Our approach of using JFrog Artifactory Enterprise, hosting on AWS, and deploying to containers
allows Polyverse to gain a huge advantage when compared to other solutions on the market. We
are always looking for platforms that will lower our TCO, but so far, this combination is a winner
in terms of low management overhead, low cognitive load, lowered costs, easy maintenance,and easy debugging. All these beneﬁts enable us to focus on what we do best - binary scrambling
to ensure security for the enterprise.” - Archis Gore, CTO at Polyverse Corporationwww.jfrog.com

www.facebook.com/artifrog/

www.twitter.com/jfrog

www.linkedin.com/company/jfrog-ltd