Pharmacy Benefits Optimizer Expands Security Coverage While Increasing Development Velocity

The company knew they needed a modern, automated, and developer-friendly security solution. They wanted something that could seamlessly integrate into their existing software delivery cycle and help their developers take ownership of security testing without slowing down development.
StackHawk quickly stood out as the trusted partner to scale their AppSec needs. Its shift-left approach aligned with the company’s need for proactive security testing earlier in the development cycle. The ability to integrate directly with GitHub and Jira meant developers could tackle security issues within their existing workflows, eliminating unnecessary back-and-forth. Plus, StackHawk’s API Discovery capabilities provided much-needed visibility into their attack surface, helping them prioritize and manage security testing efficiently. The decision was clear—StackHawk was the way forward.

Since adopting StackHawk, the company has transformed its application security approach, achieving remarkable improvements in efficiency and coverage.

Drastically Increased Scanning Momentum

Moving from just 50-60 scans per week to nearly 200, the company has significantly ramped up security testing without sacrificing speed.

Enabled Developers to Take Charge of Security

Shifting scanning responsibilities to developers has streamlined the process, allowing them to identify and fix vulnerabilities as part of their regular workflow.

Expanded Security Coverage

In just a few months, the company went from scanning a handful of applications to continuously testing over 40.

Better Alignment Between Security and Development Teams

StackHawk’s seamless integrations with developer tools and shift-left approach have created stronger collaboration, ensuring security is embedded into development rather than being an afterthought.

Improved Development Velocity

 By removing security bottlenecks, the company has accelerated its software release cycles while maintaining strict security standards.

 I don’t have to analyze the scans except for false positives, so I can work with the devs to get those fixed. Other than that, it’s in the devs’ court.

— Cloud Engineer