Case Study: MSCI addresses Spring4Shell in hours with Mend

MSCI addresses Spring4Shell in hours with Mend

MSCI, a leading provider of critical decision support tools for the global investment community, sought to improve application security and speed after adopting modern DevOps methodologies. They standardized on the vendor Mend, deploying its Mend SCA and Mend Renovate products across hundreds of repositories to manage open source vulnerabilities at the pace of development.

When the Spring4Shell vulnerability was announced, Mend's tools automatically alerted developers via integrated systems like Jira. Using Mend Renovate, developers automated pull requests to fix vulnerable dependencies, addressing the priority applications in a matter of hours. This rapid response, a result of the Mend-powered automation MSCI had implemented, prevented the event from becoming a major emergency and allowed operations to continue with minimal disruption.

MSCI