Case Study: CAE secures 800 Azure DevOps repos and accelerates vulnerability remediation with Mend SCA

CAE Secures Azure DevOps Repos with Mend SCA

CAE, a global high‑technology company with ~13,000 employees that delivers digital immersion and training solutions across aviation, defense and healthcare, had adopted Azure DevOps for rapid software delivery while also buying Mend SCA to find and fix open‑source vulnerabilities. Mend proved its value when CAE remediated Log4j issues in hours, but the team then faced the challenge of scaling SCA across many hundreds of Azure DevOps projects—agent‑based scans worked but required time‑consuming per‑project configuration.

Mend’s integration with Azure DevOps Repos enabled a single, organization‑level deployment that shifted scanning left into the repo, provided in‑context feedback and differential results in pull requests, and supported automated prioritization and remediation. The rollout instantly granted all repos access to Mend; after short training sessions, CAE secured 800 repos in three months, achieving fast, scalable vulnerability management without disrupting developer workflows.

CAE

Michael Vincent

Spécialiste DevSecOps