Case Study: FPT Software achieves enhanced code quality and security with Black Duck SCA (Synopsys)

Enhancing Code Quality and Security with Synopsys Application Security Testing Solutions

FPT Software, part of Vietnam’s FPT Corporation and a leader in digital transformation, provides end-to-end software design, development, migration and modernization services for global clients. Working frequently with legacy code and architectures not built for modern interconnected environments, FPT faced quality and security risks that drove up remediation costs and made early defect detection a priority.

FPT’s Delivery Command Center selected Synopsys Coverity SAST and Black Duck SCA to address these issues, integrating both tools into Jenkins pipelines and applying them across roughly 200 projects per year. The solution has helped FPT find and fix critical defects and open‑source risks earlier, achieve OWASP Top 10 compliance, deliver real‑time reporting with under 10% false positives/negatives, boost developer productivity and reduce remediation costs.

FPT Software

Do Van Khac

Chief Delivery Officer and Executive Vice President