Case Study: ICE Services reaches 98% scanning coverage with Semgrep
Key results
The challenge
ICE Services runs a global platform that processes music rights and royalty data for publishers, creators, and industry partners, built up over years of iteration across many services and languages including a substantial amount of Scala. As the engineering organization grew, the security team faced fragmented tools, poor coverage, limited visibility, and high noise, with no scalable application security foundation.
The solution
ICE Services deployed Semgrep Code, Semgrep Secrets, and Semgrep Supply Chain in a step-wise rollout, aiming for full repository visibility and transparent, developer-friendly security workflows. Reachability insights helped reduce false positives and audit friction while building trust between security and engineering.
The results, in context
ICE Services consolidated 550 repositories down to under 300 active repos and achieved 98% scanning coverage across its engineering codebase. The rollout enabled transparent, developer-friendly workflows and reduced false positives and audit friction using reachability insights.