Case Study: Caribou Coffee achieves 3x faster releases and PCI-compliant mobile app security with NowSecure

Caribou Coffee Brews Up App Enhancements

Caribou Coffee — a national specialty coffee retailer whose app is used by over half of its rewards customers — relied on its mobile app for order-ahead, curbside pickup and other pandemic-driven features. The company faced slow, error-prone manual security audits that could take months, produced long, hard-to-action reports, missed vulnerabilities, and hampered PCI compliance and release velocity.

By integrating NowSecure’s automated mobile application security testing into its CI/CD pipeline, Caribou now runs deep SAST/DAST/IAST/API tests on app binaries at QA and before production. The change cut a three‑month review cycle to about 30 minutes, tripled release frequency from quarterly to monthly, prioritized fixes with clear reports, ensured PCI compliance and gave developers faster, more reliable security feedback.

Caribou Coffee

Eric Caron

Senior Director of IT Solutions