CASE STUDY

Security review that keeps pace with AI-speed shipping

The TLDR.

Dovetail is a user research platform whose customers include roughly 15% of the Fortune 500. After running Dam Secure head-to-head against Claude Code Security on the same pull requests, Dovetail's engineering team found Dam Secure caught missed issues - including a critical vulnerability in a long-standing feature - and made the switch. Dam Secure now runs on every PR and has replaced Claude Code Security, at a fraction of the cost.

THE CHALLENGE

Regulated customers leave no room for security gaps

Dovetail's engineering team ships fast, serving customers who put them through months-long security reviews before signing on and retesting them regularly.

Before Dam Secure, Claude Code Security was the main PR reviewer. Did the job, basic, but very expensive.

Engineers found Claude Code Security useful but with noisy findings, poor security descriptions and needing heavy manual triage.

THE SOLUTION

A second, sharper set of eyes on every pull request

Dovetail brought Dam Secure onto every pull request alongside Claude Code Security, running the two directly against the same workload before making the switch.

‍

Dam Secure's PR scanning plugged straight into their existing GitHub flow, so nothing changed for developers day to day.

‍

When the team asked for findings to route straight into Linear, Dam Secure built it - tickets now get created automatically and sync two-way with the Dam Secure portal. The security team now have a trackable list of issues they couldn't get from Claude Code Security.

the outcome

Faster, higher-signal reviews the team actually trusts

Engineers noticed the difference immediately: findings are higher-quality and less noisy than the Claude reviews they were used to.

‍

Dovetail has switched from Claude Code Security to Dam Secure for PR scanning outright, at a fraction of the cost. Soon after rollout, Dam Secure caught a critical vulnerability in a long-standing feature.

‍

Doug Rathbone summed up simply: it "paid for itself." and "nice to have a product that does what it says it will do".

"Shortly after set-up, Dam Secure found a critical finding in a long-standing feature. It paid for itself very quickly."

Doug Rathbone
Head of Engineering, Dovetail

"This is far better than what we are getting from Claude Code Security. With deeper integrations it gets even stronger."

Sebastian Vaughan
Platform Engineering Manager, Dovetail
GET STARTED WITH DAM SECURE

Your Security. Enforced at AI Speed.

Join other security-minded teams who refuse to let AI development outpace their security practices.

Get Started
UI showing 3 rules passed with 100% accuracy, listing API security rules like CORS origins, rate limiting, input validation, sensitive data handling, and HSTS configuration.