.png){kind=logo}
Pluss Communities used to review every pull request manually, a slow process that came with real overhead for a small team. Dam Secure now catches issues automatically on every PR, giving CTO Thor Kappel Davis what he calls "extra peace of mind" that what ships is actually living up to their standards.
Pluss Communities builds white label software for aged care facilities, retirement villages, and closed seniors communities, handling personal information on vulnerable residents on behalf of their clients.
Getting ISO 27001 certified three years ago brought structure to how the team handled security. But it also meant every single pull request had to be reviewed manually by a person, a process that was time-consuming and, in CTO Thor's words, affected the team's ability to actually deliver product improvements.
That worked while the team was small. It wasn't built for the pace they needed to move at, and Pluss needed a way to enforce their standards automatically, without a person having to check every change by hand.
Pluss Communities connected Dam Secure to their GitHub repositories. From day one, Dam Secure came with rules already tailored to their setup, understanding the shape of a siloed, multi-tenant architecture that most generic tools aren't built to handle.
Every pull request is now checked automatically, the moment it's opened, rather than waiting on a person to work through it manually. That real-time check runs in the background of the team's normal workflow, without adding a step anyone has to remember.
Rules are enforced consistently across the whole team, not left to whichever engineer happens to be reviewing that day. Everyone works against the same standard, checked the same way, every time.
Dam Secure catches issues on every pull request before they reach production. Issues like a broken authentication flow, flagged and fixed before a human even opens the PR to review it.
That real-time check has changed what review actually looks like for the team. Instead of hunting for problems, engineers can look at a PR's scan history and see that whatever came up has already been resolved, giving Thor what he calls "extra peace of mind" that what ships is living up to their standards.
It's also changed how Pluss prepares for compliance. Ahead of their ISO 27001 audit, the team held their own policies against Dam Secure's rules to confirm the two matched, giving them confidence going into the audit rather than scrambling beforehand.
Join other security-minded teams who refuse to let AI development outpace their security practices.
.webp)