Case Study: Large Transportation Ticketing Company achieves agile security and faster, secure releases with Checkmarx

Large Transportation Ticketing Company Achieves Agile Security With Checkmarx

A Europe-leading transportation ticketing company—selling over 70 million trips a year, with more than 1,000 employees (200+ developers) and 2,000+ servers across two data centers—moved from waterfall to agile development in 2012. Breaking into 15-day sprints exposed a security bottleneck: biweekly penetration tests were too slow and costly, so the company needed to shift security ownership to developers, adopt secure frameworks, and add automated source-code scanning to keep pace with rapid releases.

They implemented Checkmarx in phased six-month milestones, starting with a pilot security gate and expanding to a global deployment integrated into CI and Sonar. Combined with developer security training and framework controls, the solution reduced false positives compared with open-source tools, gave teams a real-time go/no-go view of application security, increased developer security competency, and ensured no critical vulnerabilities reached production.