Case Study: GAN Integrity cuts 90% of vulnerability noise with Coana reachability (now Socket)
Key results
The challenge
GAN Integrity, an ethics and compliance software company handling sensitive data, relies heavily on open source packages, creating significant challenges in responding to vulnerabilities. Its traditional SCA tools and vulnerability scanners fell short, generating a high volume of false alarms that complicated the security team's processes and made it hard to differentiate real threats from noise.
The solution
GAN Integrity adopted Coana, now part of Socket, and its reachability analysis, which filters out irrelevant security alerts so the team can focus only on genuine, reachable threats. The vendor incorporated the team's feedback to tailor the tool to GAN Integrity's security processes.
“Coana has automated a critical part of our security process, allowing us to confidently ignore a large number of false positives.”
CGCasper GuldbergVP of Engineering, GAN Integrity
The results, in context
GAN Integrity reduced the noise of its vulnerability scanning by approximately 90%, allowing the team to confidently ignore a large number of false positives without compromising security. The case study notes that in a standard application, between 80% and 95% of results reported by traditional vulnerability scanners are false alarms.