Foundant secures
social good
About Foundant
Foundant builds software for foundations and other social good organizations—helping teams reduce barriers and maximize efficiency across grants management, donor management, fundraising and event management, accounting, and scholarship management. As Foundant grew through the merger of three companies, their engineering organization expanded and needed a consistent, scalable approach to secure development across the combined product portfolio.
“Foundations run on trust, and so does our platform. We build security and privacy into everything we do, so teams can streamline grants, donors, fundraising, accounting, and scholarships without compromising the people and communities they serve. Corgea enables that.”
Atif Manzoor - Head of Cyber Security and Systems
The Problem
After merging three companies, Foundant faced the challenge of unifying security practices and tooling for a team of ~50 developers—without slowing delivery.
Key issues included:
False negatives, which reduced confidence in findings and created risk that issues were slipping through.
A broken developer experience that made fixing harder than it needed to be.
The need to standardize security workflows across newly combined teams and codebases post-merger.
Foundant wanted a solution that developers would actually use—one that increased accuracy, reduced noise, and fit naturally into how engineers work.
“We think about security the same way we think about performance and reliability: it has to be part of the everyday developer experience. When security fits naturally into how teams build, review, and deploy, you get stronger outcomes and faster delivery. Corgea helps us make that real.”
Kase Cannon - Director of Software Engineering
The Solution
Foundant replaced their current tooling with Corgea in one week across all their pipelines, quickly rolling out a modern workflow designed around developer experience—without compromising security.
With Corgea:
Developers could identify, prioritize, and remediate vulnerabilities faster with clearer guidance.
The team adopted a more consistent process across organizations and repositories, critical after the merger.
Engineers engaged directly with Corgea and the Corgea agent, embedding security into day-to-day development instead of treating it as a separate, disruptive step.
Asif Akbar - XXX
The Results
In a short period, Foundant achieved measurable improvements:
Fixed 1,000+ vulnerabilities in 1.5 months
Clean penetration test report, reinforcing confidence in the program and platform security
No critical issues found during that remediation period
All developers actively using Corgea, improving adoption and consistency
Cleaner, smoother developer experience with Corgea and the Corgea agent supporting remediation
Ready to secure your code?
Harden your code in less than 10 mins'