Case Study: Microsoft achieves stronger open source security with Mend

Microsoft secures 11 million open source package uses with Mend

Microsoft Corporation, a major technology company with 85,000 developers, faced the challenge of securing its massive use of open source software across an enormous codebase. The company needed a highly accurate and easy-to-use security tool that would provide actionable recommendations to help developers confidently fix vulnerabilities without being burdened by false positives.

The solution was implemented by Mend, which provided its software composition analysis (SCA) tool. Mend delivered high-quality recommendations with a very low false positive rate, integrated directly into developer workflows, and offered detailed remediation advice. As a result, Microsoft's engineers could quickly and correctly upgrade vulnerable packages, with Mend successfully scaling to meet the vast needs of the company's diverse software ecosystems.

Microsoft Corporation