The TLDR.

Dovetail is a user research platform whose customers include roughly 40% of the Fortune 500 - the kind of security-conscious, regulated companies that put vendors through months of due diligence before signing on. After running Dam Secure head-to-head against Claude Code Security on the same pull requests, Dovetail's engineering team found Dam Secure caught missed issues - including a critical vulnerability in a long-standing feature - and made the switch. Dam Secure now runs on every P and has replaced Claude Code Security as Dovetail's PR scanning tool, at roughly half the cost.

THE CHALLENGE

Regulated customers leave no room for security gaps

Dovetail's ~35-person engineering team ships fast, serving customers who put them through months-long security reviews before signing on and retesting them regularly after that.

‍

Before Dam Secure, their main line of defense was Claude Code Security - coming in at a meaningful monthly cost.

‍

Engineers found it useful but still noisy and expensive: findings needed heavy manual triage, and made it hard to trust as the sole gate before merge for what they were paying.

THE SOLUTION

A second, sharper set of eyes on every pull request

Dovetail brought Dam Secure onto every pull request alongside Claude Code Security, running the two directly against the same workload before making the switch.

‍

Dam Secure's PR scanning plugged straight into their existing GitHub flow, so nothing changed for developers day to day.

‍

When the team asked for findings to route straight into Linear, Dam Secure built it - tickets get created automatically and sync two-way with the Dam Secure portal, so nothing falls through the cracks.

the outcome

Faster, higher-signal reviews the team actually trusts

Engineers noticed the difference immediately: findings are higher-quality and less noisy than the Claude reviews they were used to.

‍

Dovetail has switched from Claude Code Security to Dam Secure for PR scanning outright, at roughly half the cost. Soon after rollout, Dam Secure caught a critical vulnerability in a long-standing feature - the kind of catch Doug Rathbone summed up simply: it "paid for itself."

‍

By integrating with Linear, findings turn into tickets automatically and stay in sync as they're resolved - triage is close to hands-off.

"Shortly after set-up, Dam Secure found a critical finding in a long-standing feature. It paid for itself very quickly."

Doug Rathbone

Head of Engineering, Dovetail

"This is far better than what we are getting from Claude Code Security. With deeper integrations it gets even stronger."

Sebastian Vaughan

Platform Engineering Manager, Dovetail

GET STARTED WITH DAM SECURE

Your Security. Enforced at AI Speed.

Join other security-minded teams who refuse to let AI development outpace their security practices.

Get Started

UI showing 3 rules passed with 100% accuracy, listing API security rules like CORS origins, rate limiting, input validation, sensitive data handling, and HSTS configuration.