Case Study: Siemens Schweiz AG achieves faster open-source security and vulnerability remediation with Mend SCA

Siemens Schweiz AG Accelerates Open Source Security With Mend

Siemens Schweiz AG, the Swiss arm of global technology company Siemens AG, delivers AI-enabled and cloud-based solutions to optimize energy use and building performance for customers across sectors. Markus Leutner’s DevOps team struggled to manage the large volume of open source software—spanning at least eight languages—using a slow, manual process for identifying vulnerabilities and licensing issues. They needed a solution that would integrate with their development toolchain, provide full license coverage, enforce configurable policies, give pipeline control, and come with strong vendor support.

After a proof of concept, Siemens deployed Mend SCA in 2019, gaining fast feedback loops, early detection of forbidden licenses, and easy SBOM generation via intuitive dashboards. The tool shifted security left, enabling developers to fix issues in hours or minutes instead of days or weeks, and adoption grew from 60 to 200 licenses across 10 streams. The result was faster, more automated vulnerability and license management, smoother integration into developer workflows, and higher confidence in open source compliance.

Siemens

Markus Leutner

DevOps Engineer