Case Study: Astronomer rebuilds engineering trust and cuts AppSec noise with Endor Labs

Astronomer rebuilds engineering trust with Endor Labs and 99.1% fewer findings

Astronomer, a company providing a unified orchestration platform, faced significant challenges with its previous software composition analysis (SCA) tool. The tool generated an overwhelming number of false alerts, which eroded engineering trust and required extensive manual effort to validate risks for customer assurance. This was compounded by the company's expansion into Europe, which introduced complex new regulatory demands. To modernize its application security, Astronomer turned to the Endor Labs platform.

By implementing Endor Labs, Astronomer gained evidence-based prioritization using reachability analysis, which drastically reduced noise. The solution integrated directly into their GitHub workflows and provided the technical depth needed for their environment. The results were immediate and substantial; the security team achieved a 99.1% reduction in findings, rebuilt trust with engineers by focusing only on real risks, and established a strong foundation for complying with European regulations like DORA and the EU AI Act.

Astronomer