Case study

SCANOSS cuts scan times by 65% and reduces costs with AWS migration

Industry: Information Technology

About

SCANOSS provides a fully open-source SCA (Software Composition Analysis) platform, enabling developers to create compliant code from the start. Their platform indexes and scans over 11TB of public open-source code from sources like GitHub, Bitbucket, and GitLab.

Challenge

Due to its vast dataset and need for extremely high IOPS (Input/Output Operations per second), SCANOSS needed to reduce scanning times while optimising storage and lowering costs. Their existing Azure-based setup was struggling to deliver both the speed and efficiency required.

Solution

Firemind partnered with SCANOSS to architect and test a new AWS-based storage solution capable of handling their intense high-transaction workloads. Instead of traditional database services, we implemented Amazon S3 combined with Amazon EC2 I3 instances, which are optimised for high IOPS, low-latency workloads. A 40GB sample dataset was migrated for performance benchmarking, reducing scan times from 79 minutes to around 30 minutes - a 65% time reduction - while delivering notable cost savings.

Following successful testing, the architecture was prepared for full migration to AWS. Additional AWS services, including Amazon VPC for secure networking and Amazon CloudFormation for infrastructure automation, ensured scalability and repeatability. Firemind worked closely with SCANOSS to train their team on optimised storage practices, ensuring confidence in maintaining high-performance scanning as they fully transition from Azure to AWS.

Services used

  1. Amazon VPC
  2. Amazon CloudFormation
  3. Amazon EC2 I3 Instances
  4. Amazon S3

Results

  • 65% faster codebase scanning (79 mins → 30 mins)
  • Significant cost savings from optimised storage and reduced processing times
  • Improved retrieval speed for massive 11TB dataset
  • Full migration readiness proven with high IOPS AWS architecture
  • Developer enablement through AWS EC2 I3 training and knowledge transfer

See more case studies

  • A leading Gulf bank tests AI before buying GPUs

    A Gulf bank tested AI use cases in a secure AWS sandbox with NVIDIA AI Enterprise, then sized its on-premise GPU purchase from real results.

    • Hands-on access to NVIDIA AI Enterprise on Amazon SageMaker within a couple of weeks
    • Only synthetic or masked data in the cloud. Production data never left the bank
    • On-premise GPU purchase sized from use cases proven in the sandbox
    Learn more
  • A global automation leader proves AI can read competitors' legacy control code

    A global automation leader proved AI can read competitors' legacy control code, and is now preparing it for real use on PLCs, with engineers in control.

    • A proof of concept read legacy DCS configuration files at the targeted accuracy
    • Every data point can be traced to the line of source data it came from
    • The work now focuses on PLCs, piloted by the client's designers on real project data
    Learn more
  • Waldemar Link rolls out governed Claude to 100+ staff in six weeks

    Waldemar Link, a German orthopaedic implant maker, rolled out governed Claude with EU inference to 100+ employees in six weeks. See how it was done.

    • 6 weeks from kickoff to a governed Claude platform in production
    • 100+ employees across every department using Claude in their daily work
    • All usage governed centrally, with EU inference and cost transparency per team
    Learn more

View all case studies

CONTACT US

Start with a focused conversation about your environment.

We help you build, optimise and run AI that delivers measurable results.

Your benefits:

  • Outcome-driven - Measurable business impact
  • Expert-led - Hands-on delivery from senior practitioners
  • Secure by design - Your data and compliance requirements first
  • Fast to value - From discovery to production in weeks

What happens next?

Let's talk

A 20-minute focused session on your goals and current situation.

We propose

A clear plan and scope tailored to your priorities.

You decide

No obligation - move forward when the time is right.

No obligation - just a focused 30-minute discussion about your goals.

We'll only use your details to respond to your enquiry. No newsletters unless you ask for them.