Case Study: Global Shipping and Mailing Company improves product security with Mend SCA and Mend SAST

Global Shipping and Mailing Company reduces vulnerabilities from 25 high and 15 medium to 1–2 highs with Mend

A global shipping and mailing company faced significant application security challenges after a vulnerable open-source library compromised one of its banking applications. This incident led them to seek a new Software Composition Analysis (SCA) solution. They also needed to replace their expensive, self-hosted Static Application Security Testing (SAST) tool, Checkmarx, whose hosting costs had become unsustainable. The company required a SaaS solution to avoid infrastructure expenses, along with robust license enforcement and high-quality technical support.

The company implemented Mend SCA and later added Mend SAST, integrating the scans directly into developer IDEs and build pipelines. This provided developers with immediate feedback on vulnerable libraries and policy violations, leading to a dramatic improvement in security awareness and a reduction in vulnerabilities. The results from Mend showed a measurable impact: scans that once revealed 25 high-severity vulnerabilities now typically find only one or two. The solution also delivered significant cost savings by eliminating hosting fees and provided comprehensive container scanning and license enforcement within the existing license model.

Global Shipping and Mailing Company