--- title: "AI-Assisted Security Remediation and Platform Consolidation" url: https://www.smartdata.net/case-studies/application-security-remediation-multi-tenant-consolidation description: "One AI-assisted Smart Data engineer eliminated 620+ vulnerabilities across a national distributor's portals ahead of plan, then began consolidating them." source: "Smart Data (smartdata.net). Markdown copy of the page; the HTML page is canonical." --- # AI-assisted delivery cleared 620+ vulnerabilities, then rebuilt the platform underneath One senior Smart Data engineer, working AI-assisted end to end, closed every known vulnerability across a national distributor's customer portals ahead of plan, then used the time saved to start collapsing five to six copies of the codebase into one set of shared services, a change projected to cut about $78,000 a year from the Azure bill, with over $25,000 a year already realized. Built onAzure.NET CoreAngular Industry Wholesale distribution Engagement Custom Development A national distributor runs a set of customer-facing portals that its retail accounts use every day. The company had made security a formal company-wide priority for 2026, and the portals were carrying framework versions several releases behind, a backlog of scanner findings and open penetration test items. Smart Data staffed the work with one senior engineer working AI-assisted end to end. AI carried much of the upgrade path, the remediation, the cross-checking and the write-ups, and that is why the timeline compressed. The scoped security work finished ahead of the client's plan, which opened room for a stretch goal the client had mentioned without expecting it to be reachable: the platform behind the portals ran as five to six separate copies of the same codebase in Azure, one per retail customer. ## The challenge Remediation on a live customer-facing platform is constrained in ways greenfield work is not. Four things shaped the engagement: - Multiple production Angular portals several major versions behind current, where the upgrade itself is a large undertaking before a single vulnerability is fixed - A vulnerability backlog spanning scanner findings and open penetration test items, with no tolerance for regression on portals retail customers use daily - A single-tenant deployment model, with the full set of Azure resources duplicated for every retail customer, multiplying cost, maintenance and attack surface with each account - A company-wide security initiative that needed evidence of the fixes in a form leadership outside engineering could read ## The solution The engagement ran in two phases. AI-assisted development is what made both fit inside the time available. ### Phase one, modernization and remediation - Upgraded the customer portals from Angular 16 to Angular 21, a prerequisite for closing many findings rather than a separate project - Migrated the Azure Functions layer from the .NET 6 in-process model to the .NET 10 isolated worker model - Updated packages throughout and cut Angular bundle sizes by about 50 percent on average across the projects - Remediated every vulnerability the client's commercial scanner (Snyk) reported, more than 620 in total - Cross-checked against the open-source OSV database, which surfaced real vulnerabilities the commercial scanner had missed, and fixed those too - Closed every outstanding penetration test finding - Deleted Azure resources that were already dead, which alone took more than $25,000 a year off the bill - Used AI to produce polished written summaries at each milestone, which the client's sponsor sent to leadership as they were ### Phase two, one set of shared services (in testing) - Converting the platform from five to six per-customer copies into a single multi-tenant set of services, so a new retail account means adding a database rather than a whole suite of Azure resources - Retiring the duplicated Azure resources as the conversion lands, which is where the projected $78,000 a year comes from Clearing one commercial scanner’s findings is the usual definition of done, so the OSV cross-check, which found real vulnerabilities the commercial scanner had missed, is what took the portals past a clean report. ## The results The scoped security work finished ahead of the client's plan, and the client credits the compressed timeline to the engineer's use of AI. More than 620 known vulnerabilities (CVEs) eliminated, including findings the existing scanner had not reported Every penetration test finding remediated Portals on Angular 21; Azure Functions moved from .NET 6 in-process to .NET 10 isolated worker Angular bundle sizes about 50 percent smaller on average Over $25,000 a year in Azure spend already removed Five to six copies of the codebase becoming one set of shared services, projected to save about $78,000 a year in total The consolidation wasn’t in scope and only became possible because AI-assisted delivery finished the scoped work early. The conversion is in testing; the $78,000 stays a projection until it is in production and a full billing cycle has run. > “I attribute much [of] the quality of this work and especially the compressed timeline to Riel's mastery of AI, and his ability to apply AI to solve problems and get things done... It has been very refreshing to work with someone who 'gets it.'” IT leaderNational distributor Client Retail and distribution Platform and technology - AI-Assisted Development - Angular - .NET Core - Azure - Microservices How it fits together ## Five to six copies of the platform become one Before · one copy per retail customer - CodebaseAzure 5 to 6 copies of the same codebase in Azure After · one multi-tenant set of services One set of shared services A new retail account is a new database, not a new suite of Azure resources 620+ known vulnerabilities eliminated first, plus every penetration test finding $25K+ a year in Azure spend already removed $78K a year projected once the consolidation is in production ## Working on something similar? Tell us what you are building and what it has to connect to. Here is what happens after you reach out. ### A short call about the work What runs today, what needs to change and the date you are working toward. ### An engineer looks at what’s running Scope comes from your systems as they are, before anything is priced. ### You get a written proposal Covering scope, team, approach and price. [info@smartdata.net](mailto:info@smartdata.net)[(937) 886-9166](tel:+19378869166)