← Cases
Hong KongTravel and aviation2024 – ongoing

Cathay Pacific

GitHub Copilot for software development and security fixes

Cathay reported 63% shorter security remediation times after changing its development workflow

WorkingCompany's own claim

Problem

Fragmented development tools left security fixes until late in software projects. Cathay said those fixes consumed 10% to 25% of sprint time.

Approach

Cathay consolidated its development tools on GitHub in 2024 and applied Copilot and security tools to its development workflow in 2025. Developers used agent mode for coding tasks, while an internal system removed duplicate security alerts and prioritized vulnerabilities.

Results

63%reduction in mean time to remediate vulnerabilities, reported by CathayCompany's own claim[1]

Takeaway

The reported gains followed changes to both AI tools and the surrounding development process. Cathay did not isolate Copilot's contribution.

Categories

Business function
IT and R&D
Innovation type
Process innovation
Evidence
Company's own claim

Sources

Source summaries

[1]TechTarget30 Oct 2025

Cathay's IT leaders described their use of Copilot and security tools at GitHub Universe. They reported a 63% reduction in vulnerability remediation time and described early problems with inaccurate AI responses.

Full details are in the original sources.

Added 1 Nov 2026 · Updated 1 Nov 2026
Open case page ↗