Supreme Lending cuts application security testing from three weeks to two hours

The challenge

Supreme Lending operates in a heavily regulated industry where protecting sensitive data is paramount. As its API usage grew, the team needed comprehensive testing during development and in production, seamless CI/CD integration, and reporting that executives, security, and developers could all act on.

What they did

After an extensive review, Supreme Lending chose apisec for automated, continuous validation that plugged into its existing vulnerability management process and delivered real-time, detailed insight.

The outcome

Testing that once took three weeks now runs in about two hours, with 100% automated daily coverage and every identified issue routed straight to development.

‍

About Supreme Lending

Company: Supreme Lending
Founded: 1999 by Scott Everett
Industry: Mortgage Lending
Recognitions:

• “Best Places to Work” by American City Business Journals (past five years)
• Inc. 500/5000 company (five consecutive years)
• Top 100 Mortgage Companies in America by Mortgage Executive Magazine (2013, 2014, 2015)

Supreme Lending is a full-service mortgage lender dedicated to helping individuals secure the right loan for their homes. Their mission is to provide exceptional home-buying experiences and foster lifelong customer relationships.

Business Challenges

Supreme Lending operates in a heavily regulated industry where the security of sensitive data is paramount. With the expansion of its API usage, the company recognized the need to enhance its vulnerability management program to include comprehensive application security testing.

Key Requirements

• Run comprehensive API tests during development and in live production environments.
• Integrate seamlessly with their existing CI/CD pipeline.
• Provide detailed, actionable reporting for executives, security teams, and developers.

Solution

After an extensive review of application security solutions, Supreme Lending chose apisec for its robust, automated, and continuous API testing capabilities. apisec integrated seamlessly with Supreme Lending’s existing vulnerability management processes, enabling real-time validation and detailed insights into application security challenges.

Features of apisec:

• Pre-production and continuous API testing
• Seamless CI/CD pipeline integration
• Comprehensive reporting and dashboards

Testing Coverage

Comprehensive API security testing can be a big challenge. Not only are there dozens of security categories that we wanted to test for, but it was also important that we were running tests every time the code changed. Our primary focus with apisec has been the thorough nature of the way the scans are executed. We are now confident in the breadth, depth, and cadence of the API security testing portion of our vulnerability management program. ~Mark Nagiel

Speed to Value

"Through the integration process, the apisec team was working alongside us, making it really, really simple. Across the dozens of solutions we’ve deployed, apisec is in the top three easiest to deploy and fastest time to value.” ~Mark Nagiel

Simple to Use

"apisec greatly simplified our API security testing process, is very efficient for our security team to use, and fits very nicely into our existing Vulnerability Management Program.” ~Mark Nagiel

Future Focus: Sustaining Application Security Excellence

Looking ahead, Supreme Lending is committed to maintaining the highest standards ofsApplication security. The company plans to:

• Expand Testing Coverage: Continue broadening the scope of application security tests to cover new functionalities and services as they evolve.
• Enhance Automation: Increase automation within their security processes to reduce manual intervention and accelerate response times.
• Regular Training: Invest in ongoing training for their development and security teams to keep them updated with the latest security practices and threats.
• Collaborate with apisec: Strengthen their partnership with apisec to leverage new features and updates that enhance their security posture.

By focusing on these areas, Supreme Lending aims to stay ahead of potential threats and ensure robust protection of their sensitive data, reinforcing their commitment to security and customer trust.

Conclusion

By integrating apisec into its vulnerability management program, Supreme Lending significantly enhanced its application security testing capabilities, ensuring comprehensive coverage and real-time risk management. This collaboration led to efficient deployment and quick time to value, proving the effectiveness of proactive and continuous API security measures in protecting sensitive data in a highly regulated industry.

Do you want to join Supreme Lending and some of the world’s most successful companies that rely on apisec to protect their applications? Contact our team today to schedule a demo or get a free vulnerability assessment.

‍