Case Study: Five9 transforms software supply chain security with Endor Labs

Five9 reduces SCA noise by 96.5% with Endor Labs

Five9, a leading provider of contact center software, faced significant challenges securing its software supply chain. Its existing software composition analysis (SCA) tool generated an overwhelming number of alerts, creating a backlog of thousands of vulnerabilities. This made it difficult for the lean security team to identify genuine risks, potentially threatening the company's critical uptime. Five9 sought a new solution and selected the SCA platform from Endor Labs after a competitive evaluation.

Endor Labs provided a solution centered on "reachability analysis," which precisely identifies which vulnerabilities are actually exploitable in the code. This resulted in a 96.5% reduction in noise, paring down actionable issues from nearly 50,000 to just 30-40. This high accuracy, combined with strong CI/CD integration, enabled a single security engineer at Five9 to effectively support over 250 developers. The partnership with Endor Labs proved vital, allowing Five9 to rapidly remediate a zero-day vulnerability across 40 projects in under two weeks.

Five9