Case Study: Thatch achieves zero critical vulnerabilities with depthfirst

Thatch cuts critical vulnerabilities to zero with Depthfirst

Thatch, a company providing a flexible health budget platform for employees, faced a challenge scaling its application security. As its codebase grew, the security team could no longer manually review every change. Their existing static analysis tool required significant time to validate findings, making it unsustainable to maintain coverage without drastically increasing headcount. They turned to the vendor Depthfirst for a solution.

Depthfirst provided continuous code scanning and pull request review, which identified exploitable vulnerabilities and put findings directly into developers' workflows. This allowed developers to own remediation for most issues. The solution doubled the security team's efficiency and prevented the introduction of critical vulnerabilities even as code velocity doubled. As a result, Thatch maintains zero open critical vulnerabilities and its security team can now focus on higher-level preventive initiatives.

Thatch