Case Study: OneLogin achieves reduced code defects during development with Veracode Security Labs

OneLogin Improves Its Developer Security Training Program With Veracode Security Labs

OneLogin, a cloud-based identity and access management provider, faced the challenge of ensuring its platform met strict security expectations and that developers could write and remediate secure code. Although AppSec tools were in place, the company lacked a comprehensive, hands-on training program to move developers from theoretical knowledge to practical secure-coding skills.

OneLogin added Veracode Security Labs to a self-paced training curriculum (paired with internal video lessons), made it mandatory for new hires and then all developers, and encouraged hands-on practice. The result was higher developer engagement, proactive testing that uncovered real vulnerabilities, and a measurable reduction in code defects introduced during development; OneLogin plans to expand the program.

OneLogin

Vijay Shrenikraj

Senior Software Engineer