AI-assisted delivery cleared 620+ vulnerabilities, then rebuilt the platform underneath

The engagement ran in two phases. AI-assisted development is what made both fit inside the time available.

Phase one, modernization and remediation

• Upgraded the customer portals from Angular 16 to Angular 21, a prerequisite for closing many findings rather than a separate project
• Migrated the Azure Functions layer from the .NET 6 in-process model to the .NET 10 isolated worker model
• Updated packages throughout and cut Angular bundle sizes by about 50 percent on average across the projects
• Remediated every vulnerability the client's commercial scanner (Snyk) reported, more than 620 in total
• Cross-checked against the open-source OSV database, which surfaced real vulnerabilities the commercial scanner had missed, and fixed those too
• Closed every outstanding penetration test finding
• Deleted Azure resources that were already dead, which alone took more than $25,000 a year off the bill
• Used AI to produce polished written summaries at each milestone, which the client's sponsor sent to leadership as they were

Phase two, one set of shared services (in testing)

• Converting the platform from five to six per-customer copies into a single multi-tenant set of services, so a new retail account means adding a database rather than a whole suite of Azure resources
• Retiring the duplicated Azure resources as the conversion lands, which is where the projected $78,000 a year comes from

Clearing one commercial scanner’s findings is the usual definition of done, so the OSV cross-check, which found real vulnerabilities the commercial scanner had missed, is what took the portals past a clean report.

The scoped security work finished ahead of the client's plan, and the client credits the compressed timeline to the engineer's use of AI.

The consolidation wasn’t in scope and only became possible because AI-assisted delivery finished the scoped work early. The conversion is in testing; the $78,000 stays a projection until it is in production and a full billing cycle has run.