case study

Dovetail's security review keeps pace with AI-speed shipping

  • Every pull request reviewed, as the team ships three times faster.
  • A critical vulnerability caught in a long-standing feature.
  • Replaced Claude Code Security at roughly half the cost.
Get Started
Customer Intelligence
Dovetail tripled its engineering output this year with AI. Dam Secure reviews every pull request, catching issues Claude Code Security missed, including a critical one in a long-standing feature, at roughly half the cost.
integrationS
GitHub, OSS, Linear, Slack
ChampionS
Doug Rathbone, VP of Engineering
customer context

A principal security engineer on every change.

Dovetail is a customer intelligence platform that helps businesses understand customer feedback at scale. Some of the largest businesses in the world trust it with their most sensitive information, so security and compliance sit at the top of its priorities.

This year, Dovetail tripled its rate of delivery through AI. To keep security in step, the team experimented with building its own security analysis bots and ran Claude Code Security on its pull requests.

Costs climbed quickly, and the findings were verbose. Developers saw review as an adversarial task rather than a safety net, and the team spent more time tuning tools and suppressing noise than finding vulnerabilities.

Dovetail ran Dam Secure head-to-head against Claude Code Security on the same pull requests. Setup took connecting the GitHub repository, and Dam Secure was creating findings straight away, without nitpicking.

Developers engaged with it from day one. Findings also flow into Linear, so tickets now create themselves and stay in sync.

before dam secure
  • AI review costs climbing as delivery tripled
  • Verbose findings that developers had to triage by hand
  • Time spent tuning tools and suppressing noise
  • Review seen as an adversarial task
AFTER dam secure
  • Every pull request reviewed, at roughly half the cost
  • Findings with concrete remediation guidance
  • Tickets created and synced in Linear automatically
  • A pairing partner developers actually engage with
the outcome

Faster, higher-signal reviews the team actually trusts.

Shortly after setup, Dam Secure caught a critical vulnerability in a long-standing feature, the kind of catch Doug Rathbone says “paid for itself very quickly.”

Dovetail has since replaced Claude Code Security with Dam Secure outright.

Seb Vaughan describes Dam Secure as a proper pairing partner during the PR life cycle. It gives concrete remediation guidance, so developers turn PRs around much faster instead of spending days on triage.

It also flags issues in the emerging AI features the team is building, like prompt injection risks.

Doug Rathbone, VP of Engineering at Dovetail
"Shortly after set-up, Dam Secure found a critical finding in a long-standing feature. It paid for itself very quickly."
Doug Rathbone
VP of Engineering, Dovetail
Customer testimonial portrait
“Dam Secure has become a proper pairing partner for our developers, giving concrete remediation guidance and helping them turn around PRs much faster.”
Sebastian Vaughan
Platform Engineering Manager, Dovetail
Customer testimonial portrait
“We have tripled our rate of delivery this year, and Dam Secure has allowed our security team to keep up while keeping it cost efficient.”
Doug Rathbone
VP of Engineering, Dovetail
Customer testimonial portrait
“We didn’t need to tweak anything because the developers were already happy with Dam Secure out of the box.”
Sebastian Vaughan
Platform Engineering Manager, Dovetail
GET STARTED WITH DAM SECURE

Your Security.
Enforced at AI Speed.

Attackers are already using Mythos-level models to find vulnerabilities. Join the teams putting frontier models on your side first.

Get Started