Daikin Industries, the manufacturer of air conditioners, introduces vulnerability management tool Snyk
May 27, 2022
Snyk K.K. (headquartered in Shibuya, Tokyo; CEO Peter McKay), provider of a developer-first security platform, announced today that the Technology and Innovation Center at Daikin Industries, Ltd. (headquartered in Osaka, Japan; President and CEO Masanori Togawa; hereafter “Daikin”) has begun a pilot deployment of Snyk.
Daikin, the world’s No. 1 air conditioning manufacturer by market share, supplies products around the globe. However, in response to broader societal trends such as digitization and the push for digital transformation (DX) in business, the company has set out to transition from providing products to delivering services and solutions. As part of this shift, Daikin decided to pilot Snyk as it works to build a shared security foundation for agile development.
Background
Daikin is working to establish processes that will support the adoption of agile development using OSS (open source software).
As systems have grown increasingly complex, the scope of source code that needs to be reviewed has expanded, creating a need for a solution.
While DX initiatives often emphasize speed, Daikin considers it essential to establish a high-quality security standard as a baseline, in order to fulfill its responsibilities as a company.
Daikin decided to pilot Snyk for the following two reasons:
● Achieving “shift left” by integrating security into the development process
● Unified management from infrastructure to the application layer, essential for development in the cloud-native era
Achieving “shift left” by integrating security into the development process
Traditional tools typically check for vulnerabilities at the end of the development process. Snyk, by contrast, integrates with software packages and IDEs that developers use every day, making it possible to check for vulnerabilities as they write source code. It also enables continuous vulnerability monitoring throughout the development process.
Snyk easily integrates with existing workflows, so developers can check for vulnerabilities and misconfigurations throughout the development process without changing how they work. The ability to achieve “shift left” this way was a key benefit.
Hiroshi Maekawa, team leader at Daikin’s Technology and Innovation Center, said:
“‘Shift left’ is a very important concept. We want to focus on detecting defects and vulnerabilities as early in the development process as possible.”
Unified management from infrastructure to the application layer, essential for development in the cloud-native era
As Daikin advances its DX initiatives, it is also actively using IaC (Infrastructure as Code) and container technologies. A major benefit of Snyk was the ability to manage everything with a single tool, from the infrastructure layer of the development architecture (IaC and containers) to the application layer (custom code and open source).
Kotaro Yanagi, an engineer at Daikin’s Technology and Innovation Center, said:
“Many tools on the market scan for vulnerabilities and misconfigurations after development is complete. It’s an interesting approach to be able to secure everything with one tool, including the IaC technologies we use at our company. That’s why we have high expectations for Snyk.”
What’s next
After implementation, Snyk supports customer success through a dedicated customer success team that works alongside customers.
Hiroshi Maekawa of Daikin shared the following thoughts on Snyk’s customer success program:
“The Snyk Customer Success team takes the lead in developing a measurable validation plan. I was pleasantly surprised by their commitment to making success measurable and working alongside us. This support has been a major help with our evaluation, ensuring Snyk fits into our development process and delivers results.”
Sean McLagan, Vice President, Asia Pacific at Snyk, said the following about Daikin’s adoption of Snyk:
“We’re delighted that Snyk has been selected by Daikin, one of Japan’s leading manufacturers. We’ll continue to enhance Snyk with updates and expand the languages and features needed by Japan’s manufacturing industry.”
About Snyk
Snyk is a developer-first security platform. It helps developers find, prioritize, and fix vulnerabilities in code, open source and its dependencies, containers, and IaC (Infrastructure as Code). Snyk integrates directly with Git, IDEs, and CI/CD pipelines, making it easy for developers to use.
Today, more than 1,500 companies around the world use Snyk, including industry leaders such as Asurion, Google, Intuit, MongoDB, New Relic, Revolut, and Salesforce.
Snyk has been named to the Forbes Cloud 100 2021 and the 2021 CNBC Disruptor 50, and was recognized as a Visionary in the 2021 Gartner Magic Quadrant for AST.
Website: https://snyk.io/jp
Request information: https://go.snyk.io/jp-shiryoseikyu.html
