Case Study: Five9 reaches 96.5% noise reduction and lets one engineer secure 250+ developers with Endor Labs
Key results
The challenge
Five9's existing SCA tool produced an overwhelming volume of vulnerability alerts, leaving thousands of issues in backlog and making true risks hard to identify. The slow remediation pace threatened the company's uptime reputation, and a lean, one-person team had to secure a large codebase.
The solution
Five9 replaced its SCA platform with Endor Labs, prioritizing findings by reachability and integrating across its CI/CD and source-code-management systems. Automation and actionable, verifiable findings let a single engineer manage the program.
“If it wasn't for reachability, this program would fail. A little extra effort up front to onboard is worth the deep application context we use every day.”
GPGreg PettengillPrincipal Product Security Engineer, Five9
The results, in context
Five9 reported a 96.5% noise reduction, cutting roughly 50,000 findings to 30-40 actionable items. Combined with automation and CI/CD integration, this enabled one security engineer to support more than 250 developers and respond to a zero-day across 40 projects in under two weeks.