Zurich Seguros Application Security Transformation Case Study

This case study details Zurich Seguros' transformation of its application security program in collaboration with Veracode. The document outlines the challenges faced by Zurich, including late-stage fixes, lack of developer ownership, and misaligned priorities that hindered its digital growth. To address these issues, Zurich launched the 'SHIFT LEFT 360°' initiative, which integrated Veracode's Software Security Platform into its Azure-based development lifecycle. This strategic shift resulted in significant improvements, including a 99% developer adoption rate and a 70% reduction in audit findings. The case study further describes the implementation of automated scanning and the Security Champions Program, which fostered a culture of shared responsibility for security among development teams. The results of this initiative included accelerated development times, reduced risk, and substantial cost avoidance, demonstrating how application security can be a competitive advantage. Overall, Zurich Seguros successfully turned its application security from a bottleneck into a strategic business driver.