MA-SECURE-CODE-WARRIOR
24.3.2021 03:25:11 CET | Business Wire | Press release
New research from Secure Code Warrior ® , the global secure coding company, has revealed an attitudinal shift in the software development industry, with organisations bucking traditional practices for DevOps and Secure DevOps.
The global survey of professional developers and their managers found seven in 10 organisations (70%) recognise the importance of secure coding practices, with results indicating an industry-wide shift from reaction to prevention is underway.
Dr. Matias Madou, Chief Technology Officer and Co-Founder at Secure Code Warrior, said, “We are seeing a fundamental shift in mindsets across the world, as the industry slowly moves from reactive, band-aid solutions rolled out after a breach, to the proactive and human-led practice of writing quality software that is intrinsically free from vulnerabilities right from the very first keystroke. ”
“This research shows that ‘secure code’ is becoming synonymous with ‘quality code’ within software development, and security is becoming the responsibility of development teams and leaders—not just AppSec professionals, ” he said.
Secure coding seen as ‘reactive’
Reactive practices like using tools on deployed applications and manually reviewing code for vulnerabilities were the top two practices respondents associated with coding securely. However, a proactive shift in mindset was evidenced across the globe, with more than half (55%) of the developers surveyed also recognising secure coding as the active, ongoing practice of writing software protected from vulnerabilities.
Managers and developers are misaligned
Over half (55%) of managers surveyed said secure coding was practised and integrated throughout the entire development process, compared to only 43% of developers. Conversely, 36% of developers consider secure coding during development but not the design phase, as opposed to under one-third (32%) of managers.
Secure code an increasing indicator of success
While those surveyed identified ‘application performance’ and ‘functionality and features’ as the most common success metrics within software development (67% and 62% respectively), almost four in five (79%) respondents said the importance of ‘secure code’ was growing in prominence.
Application security is shifting
Almost half of respondents (46%) said development leads and teams should be responsible for application security rather than AppSec teams (24%). Over eight in 10 (81%) developers surveyed said they were accountable for any vulnerable code produced.
Developers motivated to upskill
‘Increased productivity and efficiency’, ‘curiosity’ and ‘avoiding problems caused by insecure code’ were identified as the leading intrinsic motivators to learn secure coding (20%, 14% and 11% respectively). Despite only 10% of respondents listing career advancement as a personal motivator, four in five (81%) managers were more likely to hire talent with secure coding skills.
More training is needed
91% of managers surveyed said they faced greater than average difficulty when implementing secure coding practices within their organisation, despite the overwhelming majority of respondents (97%) believing they were sufficiently trained. Perhaps, this is because almost nine in 10 (88%) developers surveyed said coding securely was challenging.
Madou added, “With OWASP’s Top 10 software vulnerabilities causing more security breaches over the past two decades than any others, now is the time for businesses to upskill developers to gain the knowledge and skills needed to stamp out insecure code and prevent issues from occurring in the first place. ”
“Code is at the heart of everyday interactions, and Secure Code Warrior is focused on championing security-skilled developers who can create amazing, safe software for our connected world .”
To gain early access to the report, ‘Shifting from reaction to prevention: The changing face of application security 2021’, register your interest at scw.buzz/earlyaccess
Methodology
Secure Code Warrior® commissioned Evans Data Corporation, the market intelligence leader within the IT industry, to conduct a global survey of developers and decision-makers actively engaged in software development. In August 2020, 400 respondents were surveyed across North America, India, the United Kingdom, Europe, Australia, New Zealand and South-East Asia.
About Secure Code Warrior
Secure Code Warrior is the developer-chosen solution for growing powerful secure coding skills. By making secure coding a positive and engaging experience for developers as they increase their software security skills, our human-led approach uncovers the secure developer inside every coder, helping development teams ship quality code faster.
Through inspiring a global community of security-conscious developers to embrace a preventative secure coding approach, our mission is to pioneer a people-first solution to security upskilling, stamping out poor coding patterns for good. Learn more at securecodewarrior.com .
View source version on businesswire.com: https://www.businesswire.com/news/home/20210323006113/en/
Link:
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Andersen Consulting tilføjer samarbejdspartneren Milestone Technologies19.3.2026 19:02:00 CET | Pressemeddelelse
Andersen Consulting fortsætter med at styrke sin platform for digital transformation med tilføjelsen af samarbejdspartneren Milestone Technologies, der er en veletableret global leverandør af it-services og digitale løsninger med base i USA. Milestone Technologies blev grundlagt i 1997 og leverer omfattende teknologi- og outsourcingløsninger, der spænder over digitale arbejdspladstjenester, cloud- og infrastrukturstyring, data, AI og automatisering, apps og digital engineering, business process outsourcing samt implementering af platforme som ServiceNow og Salesforce. Med hovedkontor i Fremont, Californien, opererer Milestone i 35 lande på globalt plan og samarbejder med nogle af verdens største virksomheder. Virksomhedens integrerede leveringsmodel gør det muligt for kunder at transformere deres it-drift, øge serviceeffektiviteten og skalere teknologiske økosystemer gnidningsfrit over hele verden. "Milestone Technologies er en medarbejderfokuseret organisation, der leverer målbare for
Klarna Card reaches 5 million active customers19.3.2026 15:31:00 CET | Press release
Klarna, the global digital bank and payments provider, today announced that the Klarna Card has reached 5 million active customers globally, underscoring rapid adoption as consumers shift towards new forms of payment which provide more control over day-to-day money management. The card draws from the customer's own funds for everyday spending, with the option to spread the cost of a specific purchase, like a large appliance or a flight, when it makes sense to do so. The result is a card that offers genuine spending control without the long-term debt obligations that come with traditional credit cards. The card’s growth is reinforced by Klarna’s membership program. The program offers premium perks such as airport lounge access, travel insurance, and lifestyle subscriptions — without requiring users to take on debt, meet spending thresholds, or revolve balances. By separating everyday spending from rewards, Klarna is challenging the strings-attached model legacy banks have long relied on
Stonebranch Releases 2026 Global State of IT Automation Report, Revealing Orchestration as the Missing Link for AI Adoption and Trust19.3.2026 14:30:00 CET | Press release
New research shows hybrid IT orchestration, automation-as-a-service, and WLA investments are accelerating as AI workflow deployment scales across the enterprise. Stonebranch, a leading provider of service orchestration and automation solutions, today released its annual 2026 Global State of IT Automation Report, the company’s most comprehensive research study to date. Based on responses from 402 IT automation professionals spanning C-suite executives to individual contributors across North America, EMEA, Latin America, and APAC, the report provides a detailed, data-driven portrait of how enterprises are investing in, deploying, and deriving value from IT automation in 2026. “This year’s findings highlight an important shift in how organizations approach automation,” said Giuseppe Damiani, CEO of Stonebranch. “Organizations are now building automation as strategic infrastructure — a governed, scalable foundation that spans hybrid environments, operationalizes AI, and delivers automation
Perma-Pipe Accelerates Growth with New U.S. Northeast Facility Investment to serve Artificial Intelligence Data Center customers, Provides Middle East Operations’ Update and Concludes the Board’s Review of Strategic Alternatives19.3.2026 14:00:00 CET | Press release
Perma-Pipe International Holdings, Inc. (the “Company”) today announced a strategic expansion initiative focused on accelerating growth through entry into the high-demand U.S. Northeast region. The Company is positioning itself to capitalize on the rapidly expanding Artificial Intelligence (“AI”)-driven data center market in both the United States and international markets while continuing to reinforce its leadership in critical infrastructure solutions. As part of this growth strategy, Perma-Pipe will prioritize investments aimed at expanding its presence in the rapidly evolving AI data center sector. The initiative reflects the Company’s long-term commitment to supporting next-generation technology infrastructure and strengthening its position in the global energy, industrial, and infrastructure markets. Expansion in the U.S. Northeast President & Chief Executive Officer, Saleh Sagr said, “We are excited to announce the expansion of our operations with a new facility in the Northeast
Armis Launches First-of-Its-Kind Benchmark Report Warning of Critical Security Gaps in AI-Native Development19.3.2026 13:00:00 CET | Press release
Research reveals 100% of leading generative AI models fail to generate secure code for critical development scenarios Armis, the cyber exposure management & security company, is warning that the rapid enterprise adoption of AI-native development is outpacing critical security safeguards, leaving organizations exposed to systemic vulnerabilities. New research from Armis Labs’ Trusted Vibing Benchmark Report, which evaluates 18 leading generative AI models across 31 test scenarios, reveals a 100% failure rate in generating secure code. These vulnerabilities are most prevalent in high-risk areas like memory buffer overflows, design file uploads and authentication systems. Therefore, organizations should immediately implement AI-native application security controls to reduce risk. “The era of vibe coding is here, but speed should not come at the cost of security,” said Nadir Izrael, CTO and Co-Founder of Armis. “Our research finds that the worst offenders are the same ones selling security
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom