MileIQ Securely Reimagines a Decade Old Product with Endor Labs
MileIQ, the #1 mileage tracking app, selected Endor Labs to help their security and engineering teams focus on the software supply chain risks that actually matter. Before Endor Labs, AppSec and software engineers were wasting countless hours investigating OSS risks, now they're able to pinpoint meaningful risks while using the visibility Endor Labs provides to boost productivity.
MileIQ, the #1 mileage tracking app, selected Endor Labs to help their security and engineering teams focus on the software supply chain risks that actually matter. Before Endor Labs, AppSec and software engineers were wasting countless hours investigating OSS risks, now they're able to pinpoint meaningful risks while using the visibility Endor Labs provides to boost productivity.
MileIQ, the #1 mileage tracking app, selected Endor Labs to help their security and engineering teams focus on the software supply chain risks that actually matter. Before Endor Labs, AppSec and software engineers were wasting countless hours investigating OSS risks, now they're able to pinpoint meaningful risks while using the visibility Endor Labs provides to boost productivity.
- #1 mileage tracking app in the world
- Over 80B miles tracked
- Over 100k reviews on App Store and Google Play
- More than $10B reimbursed
MileIQ, the #1 mileage tracking app, selected Endor Labs to help their security and engineering teams focus on the software supply chain risks that actually matter. Before Endor Labs, AppSec and software engineers were wasting countless hours investigating OSS risks, now they're able to pinpoint meaningful risks while using the visibility Endor Labs provides to boost productivity.
MileIQ, the #1 mileage tracking app, selected Endor Labs to help their security and engineering teams focus on the software supply chain risks that actually matter. Before Endor Labs, AppSec and software engineers were wasting countless hours investigating OSS risks, now they're able to pinpoint meaningful risks while using the visibility Endor Labs provides to boost productivity.
MileIQ delivers software solutions that take the hassle out of mileage tracking. After 11 years, hundreds of billions of miles, and returning to their roots as an independent company, MileIQ continues to deliver on the promise to save people who drive for work time and money. They released their newest product, MileIQ for Teams, in 2022, providing businesses with an efficient and automated way to track and report employee mileage for reimbursement. MileIQ’s thousands of 5-star reviews speak volumes: they are the industry creator, leader, and innovator.
CEO Andrey Kolesnikov put it well when he said the company’s 11-year history represents a lot of loyal customers, and we felt the imperative to re-imagine our product to even better serve the need for the next decade. With millions of customers across the globe, the team set out on a mission to evolve the product. They needed to decide what to sunset, reimagine, or update, but open source dependency management quickly became a problem. Their existing SCA provider produced an overwhelming number of alerts for vulnerable dependencies across MileIQ’s many dozens of repos, making it nearly impossible to balance security with business value.
MileIQ sought an SCA replacement that could support their language needs (across the stack, from mobile to data and everything in between) and let them focus on what mattered most: Evolving the product while optimizing security and developer productivity. They started by exploring basic SCA options, but quickly discovered those tools still buried them with “noise.” The team found Endor Labs’ unique reachability analysis could quickly identify vulnerabilities that are accessible in their code, allowing them to deprioritize unreachable issues. Endor Labs is a pillar in MileIQs compliance posture and controls around the software delivery lifecycle, all being part of the mission to earn customer trust every day. Endor Labs was very complimentary to MileIQ existing workflows and took days to get up and running.
“With Endor Labs we know where to focus, while other tools tell us to focus everywhere. We’re feeding three birds at once, Endor Labs makes us more productive by telling us where to focus, it improves our security posture, and it’s meeting us where we work.” - Andrey Kolesnikov, CEO, MileIQ
Today, MileIQ can focus on evolving their product and platform. With Endor Labs, they have achieved:
- Noise Reduction— Their team is confident that they’re focusing on the OSS risks that really matter.
- Developer Productivity— With Endor Labs as part of the pipelines, developers are empowered to handle risk mitigation in the flow of where they do their work.
- Tech Debt Management— Endor Labs continuously monitors MileIQ’s estate for outdated, unmaintained, and unused dependencies, and surfaces the one relevant to their apps.
- Risk Reduction & Compliance— They use Endor Labs as a factor in prioritizing features and foundational efforts. This supports threat modeling and larger risk management activities.