We proactively fixed ~100 security issues in 6 days with 0 humans builders.ramp.com
Ramp’s security team built its own vulnerability pipeline: detectors flag issues, managers argue against the findings, then a validator writes a test that only passes if the endpoint is vulnerable, before a fixer works test-first. Nearly 100 issues found and patched in a week.