Case Study: Global Life Insurance Company achieves a 20% reduction in application flaw risk and 300+ monthly security scans with Veracode

Global Insurer Reduces Risk of a Breach Without Slowing Down Development

A global life insurer with more than 700 developers and 800 applications serving customers in 50+ countries needed to secure its software estate, meet regulatory and customer requirements, and ensure outsourced code met the same standards as internal development — all without slowing continuous delivery or inflating costs.

The company adopted Veracode Developer Sandbox, creating separate sandboxes for internal, contractor, and release candidate code so developers could scan and fix flaws early before policy scans and pipeline integration. As a result, monthly scans increased from ~75 to 300+, flaw density fell 20% in one year (now about one-quarter the typical financial services rate), and teams reduced breach risk while maintaining development velocity.