Application security in the digital age

Higher agent accuracy, lower token cost
Learn how to harden your software factory and let AI agents earn autonomy, without trading away security.
Stay updated with our latest features and improvements.
This report analyzes the results of a survey conducted by Omdia and GitLab in April 2024, in which we asked over 5,000 software development, security, and operations professionals worldwide about their organization's position on and adoption of DevSecOps principles and practices.
This year's survey reveals a perfect storm for security vulnerabilities: organizations are feeling more pressure to deliver software faster than ever before, so they're turning to artificial intelligence (AI) and open source libraries to accelerate development — and that, in turn, is increasing the attack surface and introducing new concerns around the security and privacy of AI tools. But our findings also highlight how organizations are getting the best of both worlds by establishing strategic application security programs that enable teams to move faster without sacrificing security.
of respondents said their organizations are releasing software 2x as fast or faster than last year
of developers said more than a quarter of the code they work on is from open source libraries — but only 1 in 5 of organizations are currently using a software bill of materials (SBOM) to document the ingredients that make up their software components
of respondents said that introducing AI into the software development lifecycle is risky; the top concerns are privacy and data security
of respondents said their organizations have implemented dynamic application security testing (DAST), an 8% increase from 2023
Get free access to the full report with insights from over 5,000 DevSecOps professionals in 39 countries worldwide.
What's in the report
Git is a trademark of Software Freedom Conservancy and our use of 'GitLab' is under license