07 — 2023 - 2025
Platform, Web & TrustLogin & account security
Standardising authentication: reCAPTCHA, 2FA, SSO and social signup to reduce abuse and friction, and support enterprise security needs.
- Role
- Product manager and program manager
- TEAM
- 1 IT team, 7-8 developers (front-end and PHP) with QA, UX and design experts, and data analysts; security, legal and compliance as stakeholders and SMEs
Goal
Standardise authentication to industry norms — cut account takeover and bot abuse, meet the security expectations of enterprise buyers, and at the same time reduce signup and login friction through social and SSO entry points.
Context
Authentication had grown organically. Bot signups and credential-stuffing attempts created abuse and compliance exposure, enterprise security reviews raised repeat objections, and every extra login step cost conversion at the top of the funnel.
What I did
- Treated security and conversion as one problem rather than a trade-off: the same programme added protection and removed steps.
- Integrated Google Enterprise reCAPTCHA against bot signup and automated abuse.
- Delivered 2FA with Twilio and Vonage as delivery providers, and SSO for accounts that require centrally managed identity.
- Added social signup and login through Google OAuth and Microsoft 365 OAuth, shortening the path from intent to account.
- Worked with security, legal and compliance as SMEs to align the implementation with enterprise review criteria and regulatory expectations.
Outcome
ShippedShipped. Directionally: reduced bot and takeover exposure, fewer blockers in enterprise security reviews, and a lower-friction entry path for self-serve signups.
Stack & methods
Visuals
