Case Study: CARFAX improves security and streamlines DevOps with GitLab

CARFAX improves security, cuts pipeline management and costs with GitLab

CARFAX, the vehicle history company serving millions of shoppers with a massive database and a complex software environment, was spending too much time and money maintaining a 12-tool DevOps toolchain. The team also needed to find vulnerabilities earlier in the development lifecycle and reduce the manual effort required for security scans. GitLab Ultimate was chosen to help address these DevSecOps and pipeline management challenges.

With GitLab’s DevSecOps platform, CARFAX consolidated tools, mirrored its codebase into GitLab, and expanded use of built-in security scanning, code repositories, and CI/CD pipelines. GitLab helped CARFAX scan the full codebase without manual steps, detect nearly one-third of vulnerabilities earlier over the past year, and reduce toolchain complexity by about half. The company also saw a 14% increase in production deployments in 2022 and roughly 25% growth in production deployments in the first five months of 2023, all while operating its tooling team with just two people instead of five.

CARFAX

Mark Portofe

Director of Platform Engineering