Case Study: PCL Construction achieves faster vulnerability detection and a security-first development culture with Checkmarx One by Checkmarx

PCL Construction Builds Safer Applications and Strong Security Culture

PCL Construction, a leading North American contractor with over 100 in-house applications and an active cloud migration, needed to shift security left across the software development lifecycle. The team faced the challenge of protecting cloud-based, business‑critical apps earlier and more cost‑effectively while maintaining developer productivity and managing significant open‑source usage.

PCL implemented the cloud-native Checkmarx One platform (SAST and SCA) and Codebashing for just-in-time secure coding training, choosing a single, cost‑effective solution with unlimited-app licensing. Onboarding took under four hours, automated scans now cover millions of lines of code and 20+ apps weekly, developers adopted the tools quickly, and the team is detecting and remediating vulnerabilities faster while improving open-source supply-chain visibility and building a security-focused culture.

PCL Construction

Joel Godbout

Networking Manager