Skip to content
case study Technology / Software · PCI DSS

Company Meets PCI Secure Coding Training Compliance

How a software company serving Fortune 500 customers trained 1,500 developers, met PCI requirements, and proved the ROI to engineering leadership.
Read the Case Study
Region
North America
Users
1,500
Company Size
Mid-Size
Industry
Software Technology
Compliance
PCI DSS
01 · The Company

41 million end-user records to protect

A software technology company with many Fortune 500s as customers wanted a training solution to meet PCI secure coding requirements — and reduce vulnerabilities to protect their applications and their end-users' data.
02 · The Challenge

Justify the time, show the ROI

Before any training, every developer took a secure coding assessment covering SQL Injection, XXE, Cross-Site Scripting and Insecure Deserialization.
assessment --baseline
avg_score19%
vulns_fixed14%
fixed_zero58% of developers
03 · The Solution

Hands-on training for every developer

Interactive lessons built the ability to write secure software, showed how systems are attacked, and cut the time to resolve security issues — while meeting PCI secure coding training requirements.

Security Journey works in that you have to actually solve problems and code. In terms of measuring effectiveness, it's a fantastic product.

Robert Walker — Secure Software Development Leader, Zoom
04 • The Results

Nine months later, a different team

85%

Average assessment score, up from 19%

81%

Of vulnerabilities found and fixed, up from 14%

452%

Average improvement in finding and fixing vulnerabilities

Download the Case Study

Get the full PCI compliance story

Download the Case Study