127 million data points spanning repositories and scan events fueled an industry report on application security remediation. The analysis revealed a stark gap: top teams fix vulnerabilities 2-3x faster than peers, highlighting the critical importance of systematic follow-through. This project combined SQL, data cleaning, and storytelling to transform raw security data into actionable insights for both technical and non-technical audiences.

Key lessons emerged: start with data exploration before defining narratives, become a domain expert to add context, engage the target audience early to shape structure and recommendations, involve design early for clarity, and allow ample time for refinement. The final report segmented organizations into leaders and the field, providing clear benchmarks and evidence-based strategies for improvement.