<50
HIGH/CRITICAL CVES — DOWN FROM NEARLY 5,000
100s
OF PIPELINES BUILT IN THREE MONTHS
Nightly
UPSTREAM SECURITY PATCHES APPLIED AUTOMATICALLY
01 THE CHALLENGE
A globally recognized HPC manufacturer faced a security vulnerability backlog that manual effort could not clear. High and critical CVEs across a large software platform numbered in the thousands — far beyond what patch-by-hand processes could absorb without stalling product delivery.
Customers and contractual obligations required a credible path to a controlled vulnerability posture, not another one-off cleanup sprint.
02 WHAT WE DID
Broadwing built automation that made continuous patching the default path:
→
Nightly rebuild pipelines — Created hundreds of pipelines that rebuild containers and packages, pulling upstream security fixes on a nightly cadence.
→
Scale over heroics — Replaced manual triage with systematic rebuild-and-promote flows so residual findings were only those still waiting on upstream patches.
→
Evidence for customers — Produced a repeatable posture the manufacturer could show its customer base and auditors.
03 THE OUTCOME
High and critical CVE count dropped from nearly 5,000 to under 50 — with the remainder awaiting upstream patch development. The pipelines continue to run, meeting contractual obligations and restoring confidence without freezing the product roadmap.
MORE WORK
ALL CASE STUDIES →
Engineering clarity in a world of complexity. Platform, data, security, and HPC engineering for teams that can't afford downtime.
© 2026 BROADWING LIMITED