Case Study: Tremendous secures its software supply chain with Docker and Socket

Tremendous cuts container CVEs by 90% with Docker

Tremendous, a financial technology company that handles payouts for over 20,000 organizations, needed to secure its entire software supply chain. This included protecting both the base operating system images and the open-source dependencies built on top of them from vulnerabilities and malicious code. The challenge was to find a solution that could secure both layers without creating coverage gaps.

The vendor Docker, alongside Socket, provided a solution. Docker's Hardened Images remediated the base image layer, while Socket mitigated risk in the open-source dependencies. This combined approach resulted in a 90-97% reduction in CVEs across their Ruby and Node.js images, a significantly reduced package footprint, and a more secure, auditable foundation for their entire platform.

Tremendous