Interactions automates vulnerability remediation and secure code transformation
By the numbers
01 · The challenge
Interactions delivers conversational AI to enterprise contact centers, processing billions of customer interactions each year. Its AI assistants integrate deeply with client systems across telecom, finance, and retail. Scaling that platform meant managing hundreds of repositories in Java, Spring Boot, Python, and JavaScript, coordinated through Maven and GitLab, and keeping code secure and consistent across a distributed engineering org.
Static scanning with Veracode revealed issues but did not resolve them. Manual remediation fell on individual developers, creating technical debt, risk, and frustration. Approaching their Veracode renewal, the team found Moderne and saw how automated remediation could address vulnerabilities and improve code quality at scale.
02 · The solution
Instead of relying on scanners that only flagged issues, Interactions adopted Moderne to automate secure code transformation at scale. They started by fixing vulnerable dependencies and applying consistent formatting across the codebase, encoding best practices as reusable, testable recipes integrated into CI/CD.
From there the team tackled larger modernization goals, including the migration from Spring Boot 2.x to 3 and the jump to Java 21. Using Moderne’s Lossless Semantic Tree model, engineers embedded composite recipes into their pipelines to fix issues flagged by scanning tools, apply organization-wide rules, and clean and standardize code automatically, replacing one-off scripts.
03 · The results
By adopting Moderne, Interactions accelerated vulnerability remediation and reduced the manual lift needed to maintain secure, standardized code across 45+ repositories. What once required extensive manual review and custom scripting is now handled automatically through recipe-driven refactoring in CI/CD.
Using composite recipes, the team completed migrations to Java 21 and Spring Boot 3 while enforcing consistent standards across codebases. Security fixes are no longer deprioritized; they are part of a repeatable process, freeing developers to focus on innovation and client value.
See deterministic, estate-wide code change on your own repositories.