MA-SECURE-CODE-WARRIOR
24.3.2021 03:25:11 CET | Business Wire | Press release
New research from Secure Code Warrior ® , the global secure coding company, has revealed an attitudinal shift in the software development industry, with organisations bucking traditional practices for DevOps and Secure DevOps.
The global survey of professional developers and their managers found seven in 10 organisations (70%) recognise the importance of secure coding practices, with results indicating an industry-wide shift from reaction to prevention is underway.
Dr. Matias Madou, Chief Technology Officer and Co-Founder at Secure Code Warrior, said, “We are seeing a fundamental shift in mindsets across the world, as the industry slowly moves from reactive, band-aid solutions rolled out after a breach, to the proactive and human-led practice of writing quality software that is intrinsically free from vulnerabilities right from the very first keystroke. ”
“This research shows that ‘secure code’ is becoming synonymous with ‘quality code’ within software development, and security is becoming the responsibility of development teams and leaders—not just AppSec professionals, ” he said.
Secure coding seen as ‘reactive’
Reactive practices like using tools on deployed applications and manually reviewing code for vulnerabilities were the top two practices respondents associated with coding securely. However, a proactive shift in mindset was evidenced across the globe, with more than half (55%) of the developers surveyed also recognising secure coding as the active, ongoing practice of writing software protected from vulnerabilities.
Managers and developers are misaligned
Over half (55%) of managers surveyed said secure coding was practised and integrated throughout the entire development process, compared to only 43% of developers. Conversely, 36% of developers consider secure coding during development but not the design phase, as opposed to under one-third (32%) of managers.
Secure code an increasing indicator of success
While those surveyed identified ‘application performance’ and ‘functionality and features’ as the most common success metrics within software development (67% and 62% respectively), almost four in five (79%) respondents said the importance of ‘secure code’ was growing in prominence.
Application security is shifting
Almost half of respondents (46%) said development leads and teams should be responsible for application security rather than AppSec teams (24%). Over eight in 10 (81%) developers surveyed said they were accountable for any vulnerable code produced.
Developers motivated to upskill
‘Increased productivity and efficiency’, ‘curiosity’ and ‘avoiding problems caused by insecure code’ were identified as the leading intrinsic motivators to learn secure coding (20%, 14% and 11% respectively). Despite only 10% of respondents listing career advancement as a personal motivator, four in five (81%) managers were more likely to hire talent with secure coding skills.
More training is needed
91% of managers surveyed said they faced greater than average difficulty when implementing secure coding practices within their organisation, despite the overwhelming majority of respondents (97%) believing they were sufficiently trained. Perhaps, this is because almost nine in 10 (88%) developers surveyed said coding securely was challenging.
Madou added, “With OWASP’s Top 10 software vulnerabilities causing more security breaches over the past two decades than any others, now is the time for businesses to upskill developers to gain the knowledge and skills needed to stamp out insecure code and prevent issues from occurring in the first place. ”
“Code is at the heart of everyday interactions, and Secure Code Warrior is focused on championing security-skilled developers who can create amazing, safe software for our connected world .”
To gain early access to the report, ‘Shifting from reaction to prevention: The changing face of application security 2021’, register your interest at scw.buzz/earlyaccess
Methodology
Secure Code Warrior® commissioned Evans Data Corporation, the market intelligence leader within the IT industry, to conduct a global survey of developers and decision-makers actively engaged in software development. In August 2020, 400 respondents were surveyed across North America, India, the United Kingdom, Europe, Australia, New Zealand and South-East Asia.
About Secure Code Warrior
Secure Code Warrior is the developer-chosen solution for growing powerful secure coding skills. By making secure coding a positive and engaging experience for developers as they increase their software security skills, our human-led approach uncovers the secure developer inside every coder, helping development teams ship quality code faster.
Through inspiring a global community of security-conscious developers to embrace a preventative secure coding approach, our mission is to pioneer a people-first solution to security upskilling, stamping out poor coding patterns for good. Learn more at securecodewarrior.com .
View source version on businesswire.com: https://www.businesswire.com/news/home/20210323006113/en/
Link:
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Pure Lithium Receives Australian Patent for "Lithium Metal Anode and Battery"6.8.2026 22:49:00 CEST | Press release
Pure Lithium Corporation, a vertically integrated next-generation lithium metal battery technology company, today announced that the Australian patent office has granted the company a patent (AU2025271196) titled “Lithium metal anode and battery.” Australia mines roughly half of the world’s lithium, yet has no domestic battery production at all; every battery the country uses is imported. The granted patent is directed to ways in which Pure Lithium’s technology can change that. Rather than trying to catch up in lithium-ion, Australia can leapfrog the incumbent technology and establish a next-generation industry. As worldwide demand for batteries grows, every country capable of making batteries needs to be making them. That is Pure Lithium’s central goal: opening up markets around the world through battery technology that enables local, independent supply chains, keeping pace with demand and strengthening economies. China controls the lithium-ion battery supply chain and manufactures th
Vercel Appoints Amit Agarwal, Standard Template Labs CEO and former Datadog President, to Board of Directors6.8.2026 17:00:00 CEST | Press release
The product leader who helped scale Datadog from early-stage startup through IPO brings deep product expertise to Vercel's board Vercel, the agentic infrastructure company, today announced the appointment of Amit Agarwal, former president of Datadog and founder and CEO of Standard Template Labs, an AI-first service management platform, to its board of directors. Agarwal brings 25 years of enterprise software experience and a track record of scaling a product-led company from its earliest days into one of the defining public software companies of the cloud era. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260806738617/en/ Amit Agarwal Agarwal joined Datadog in 2012 as its Chief Product Officer and was named President in 2022, overseeing product, corporate development, and go-to-market functions as the company grew past $2.5 billion in annual revenue. Across 13 years, including Datadog's 2019 IPO and its first years as a pub
Laserfiche Launches Advanced Enterprise Security to Deliver Multi-Region Disaster Recovery and GovRAMP-Ready Compliance for Highly Regulated Industries6.8.2026 16:00:00 CEST | Press release
New security suite extends Laserfiche’s proven security controls and adds near real-time data replication for governments, law enforcement and security-conscious enterprises. Laserfiche — the leading SaaS provider of intelligent content management — today announced the launch of Enterprise Security, an advanced suite of security enhancements designed for organizations navigating complex regulatory environments. Enterprise Security addresses GovRAMP and CJIS (Criminal Justice Information Services) security requirements based on the NIST SP 800-53 framework. For organizations handling privileged citizen, legal or corporate data, these built-in controls streamline audit preparation and fortify defenses. With organizations placing a higher priority on data stewardship and corporate governance, enterprise IT leaders require a security architecture that protects data without slowing down operations. Laserfiche Enterprise Security extends Laserfiche Cloud’s highly resilient infrastructure wit
AM Best Upgrades Fortegra Insurance Subsidiaries to A (Excellent)6.8.2026 15:00:00 CEST | Press release
Rating actions follow completion of the DB Insurance acquisition The Fortegra Group, Inc. (“Fortegra” or the “Company”), a global specialty insurer and part of DB Insurance Co., Ltd., today announced that AM Best has upgraded the Financial Strength Rating (FSR) of its insurance subsidiaries to A (Excellent) from A- (Excellent) and the Long-Term Issuer Credit Ratings (Long-Term ICRs) to “a” (Excellent) from “a-” (Excellent). The outlook assigned to the ratings is stable, and AM Best removed the ratings from under review with positive implications. KBRA has also upgraded all of its ratings for the Company. The upgrade applies across Fortegra’s insurance platform. The property and casualty companies include Lyndon Southern Insurance Company, Insurance Company of the South, Response Indemnity Company of California, Blue Ridge Indemnity Company, Fortegra Specialty Insurance Company and Fortegra Europe Insurance Company SE. The life and health companies include Life of the South Insurance Co
Khimji Ramdas Group Chooses Rimini Street to Reduce SAP Support Costs, Protect 700+ Customizations and Reinvest Savings in Innovation6.8.2026 15:00:00 CEST | Press release
Omani conglomerate gains greater control over its IT roadmap, avoids migration pressure and funds AI and growth initiatives Rimini Street, Inc. (Nasdaq: RMNI), the Software Support and Agentic AI ERP Company™ and the leading third-party support provider for Oracle, SAP and VMware software, today announced that Khimji Ramdas Group, one of Oman’s largest privately held conglomerates, has selected Rimini Support™ for SAP, a move that has helped the organization reduce costs, reinvest savings in AI innovation and maintain its highly customized SAP ECC 6 environment with zero downtime. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260806244148/en/ Khimji Ramdas Group Chooses Rimini Street to Reduce SAP Support Costs, Protect 700+ Customizations and Reinvest Savings in Innovation “Staying on SAP ECC is a strategic decision for us,” said Prashant Kumar, CTO, Khimji Ramdas Group. “We went to an industry analyst to ask what options
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom