Infrastructure as Code (IaC) Optimization

From use case: Infrastructure as Code (IaC) Optimization

Financial services organizations have demonstrated particularly strong results. Financial technology firm Pomelo, which handles sensitive data and must comply with extensive financial regulations, struggled with multiple security tools in various languages and a growing number of repositories, leading to a growing number of false positives and difficulty producing the audit reports required by regulators. After deploying the Snyk application security tool across its roughly 900 repositories, Pomelo was able to resolve 9,500 issues and build important integrations, such as a connection between Snyk and Slack to notify personnel of issues that need their attention, according to a Snyk case study. “The most important thing for us is that you can manage the security test findings data from one place,” says Leandro Sanginetto, a technical expert engineer at Pomelo. “That was the painful thing that we were fighting with before Snyk.”

One multinational bank based in Asia deployed technology from Tufin to manage security across 33 firewalls in 40 countries, automated management of more than 4,000 rules that previously were managed manually or through spreadsheets and eliminated a 12-month backlog of security rules that required review and recertification, according to a Tufin case study.

The global infrastructure as code market size was valued at $759.1 million in 2022 and was projected to grow from $908.7 million in 2023 to $3.3 billion by 2030, a CAGR of 20.3% during the forecast period, according to Fortune Business Insights. North America accounts for nearly 40% of that spending, the report says.