Case Study: Uphold reaches 100% AppSec coverage in 1.5 days across ~1,000 repositories with Cycode
Key results
The challenge
As its engineering organization scaled, Uphold, a digital finance platform, set out to centralize and modernize application security operations. Its AppSec team had data but it was fragmented, and the team needed automation, software supply chain visibility, and a single platform to unify everything from developer workflows to executive reporting.
The solution
Uphold deployed Cycode as a unified ASPM platform covering SAST, SCA, secrets detection, and CI/CD security, with automated repository ownership and team mapping. The rollout established KPIs, training metrics, and maturity reporting to drive executive alignment and continued investment.
“Cycode fundamentally aligns with our AppSec strategy. It allows us to focus less on building and maintaining internal tooling and more on managing risk, governance, and developer empowerment. We now have automated supply chain visibility, searchable insights, and metrics to measure progress across teams.”
DSDiogo SalvadorSenior Application Security Engineer, Uphold
The results, in context
Uphold reached 100% SAST, SCA, Secrets, and CI/CD security coverage across its repositories in 1.5 days, with full production rollout completed in under two days and immediate visibility into nearly 1,000 repositories. From evaluation to full production, the rollout took under one month, and Uphold reported zero exposed secrets post-onboarding with complete supply chain visibility.