How Best Buy Reduced False Positives by 80%

The Need

Scalable AppSec for One of the Largest Retail Tech Environments in North America

Best Buy’s application environment is massive, comprising:

• 3000+ engineers
• 300 application teams
• 8000 repositories
• Thousands of microservices

“Our environment is deceptively large,” says Matthew Hurewitz, Director of Application Security, when addressing Best Buy’s complex security posture. “We support nearly every language and framework you can imagine” Mathhew explains further and adds jokingly -“Some of our applications are old enough to drink.”

To secure this scale and complexity, Best Buy needed a modern AppSec platform that could:

• Seamlessly integrate into developer workflows
• Deliver accurate, fast results without introducing friction
• Consolidate toolsets across SAST, SCA, secrets detection, and more
• Provide centralized governance and consistent remediation workflows

The Solution

Unified, Scalable AppSec That Accelerates Development Without Sacrificing Security

Best Buy used Checkmarx One to centralize scanning, triage, and remediation across SAST, SCA, and CI/CD pipelines. With strong support from Checkmarx, the Best Buy team was able to:

• Integrate into CI/CD to embed security scans into every release pipeline
• Improve Dev Experience with faster scans and reduced friction
• Simplify Tooling by consolidating multiple vendors into a single platform
• Gain Visibility into actual risk and improve prioritization with analytics