Problem
A risk-scored vulnerability workflow for 120 repositories and 600 container images with SLA automation and owner routing.
Solution
Problem
The client operated 120 repositories and 600 container images. SCA and SAST findings were accumulating and high-severity issues were leaking into production workflows.
Solution
We built VulnSense with a PR bot, risk scoring engine, and SLA timer automation. Owner routing pushed findings to the right teams through GitHub/GitLab, Jira, and Slack integrations.
Architecture Notes
- A risk gauge surface unified severity, impact, and remediation priority.
- SLA policies automatically escalated findings approaching breach windows.
- PR-based safe fixes, ticket linkage, and validation checks were standardized end to end.
Outcome
Median closure time for critical findings dropped from 21 days to 9 days. Alert noise decreased by 28%.
Architecture
SCA | SAST | PR Bot | GitHub | GitLab | Jira | Slack
Results
Critical finding median closure: 21 days to 9 days
Noise reduced by 28%