Research Reveals Global Growth of Secure DevOps
24.3.2021 05:23:00 EET | Business Wire | Press release
New research from Secure Code Warrior ®, the global secure coding company, has revealed an attitudinal shift in the software development industry, with organisations bucking traditional practices for DevOps and Secure DevOps.
The global survey of professional developers and their managers found seven in 10 organisations (70%) recognise the importance of secure coding practices, with results indicating an industry-wide shift from reaction to prevention is underway.
Dr. Matias Madou, Chief Technology Officer and Co-Founder at Secure Code Warrior, said, “We are seeing a fundamental shift in mindsets across the world, as the industry slowly moves from reactive, band-aid solutions rolled out after a breach, to the proactive and human-led practice of writing quality software that is intrinsically free from vulnerabilities right from the very first keystroke.”
“This research shows that ‘secure code’ is becoming synonymous with ‘quality code’ within software development, and security is becoming the responsibility of development teams and leaders—not just AppSec professionals,” he said.
Secure coding seen as ‘reactive’
Reactive practices like using tools on deployed applications and manually reviewing code for vulnerabilities were the top two practices respondents associated with coding securely. However, a proactive shift in mindset was evidenced across the globe, with more than half (55%) of the developers surveyed also recognising secure coding as the active, ongoing practice of writing software protected from vulnerabilities.
Managers and developers are misaligned
Over half (55%) of managers surveyed said secure coding was practised and integrated throughout the entire development process, compared to only 43% of developers. Conversely, 36% of developers consider secure coding during development but not the design phase, as opposed to under one-third (32%) of managers.
Secure code an increasing indicator of success
While those surveyed identified ‘application performance’ and ‘functionality and features’ as the most common success metrics within software development (67% and 62% respectively), almost four in five (79%) respondents said the importance of ‘secure code’ was growing in prominence.
Application security is shifting
Almost half of respondents (46%) said development leads and teams should be responsible for application security rather than AppSec teams (24%). Over eight in 10 (81%) developers surveyed said they were accountable for any vulnerable code produced.
Developers motivated to upskill
‘Increased productivity and efficiency’, ‘curiosity’ and ‘avoiding problems caused by insecure code’ were identified as the leading intrinsic motivators to learn secure coding (20%, 14% and 11% respectively). Despite only 10% of respondents listing career advancement as a personal motivator, four in five (81%) managers were more likely to hire talent with secure coding skills.
More training is needed
91% of managers surveyed said they faced greater than average difficulty when implementing secure coding practices within their organisation, despite the overwhelming majority of respondents (97%) believing they were sufficiently trained. Perhaps, this is because almost nine in 10 (88%) developers surveyed said coding securely was challenging.
Madou added, “With OWASP’s Top 10 software vulnerabilities causing more security breaches over the past two decades than any others, now is the time for businesses to upskill developers to gain the knowledge and skills needed to stamp out insecure code and prevent issues from occurring in the first place.”
“Code is at the heart of everyday interactions, and Secure Code Warrior is focused on championing security-skilled developers who can create amazing, safe software for our connected world.”
To gain early access to the report, ‘Shifting from reaction to prevention: The changing face of application security 2021’, register your interest at scw.buzz/earlyaccess
Methodology
Secure Code Warrior® commissioned Evans Data Corporation, the market intelligence leader within the IT industry, to conduct a global survey of developers and decision-makers actively engaged in software development. In August 2020, 400 respondents were surveyed across North America, India, the United Kingdom, Europe, Australia, New Zealand and South-East Asia.
About Secure Code Warrior
Secure Code Warrior is the developer-chosen solution for growing powerful secure coding skills. By making secure coding a positive and engaging experience for developers as they increase their software security skills, our human-led approach uncovers the secure developer inside every coder, helping development teams ship quality code faster.
Through inspiring a global community of security-conscious developers to embrace a preventative secure coding approach, our mission is to pioneer a people-first solution to security upskilling, stamping out poor coding patterns for good. Learn more at securecodewarrior.com.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20210323006113/en/
Contact information
For media enquiries, to access the full report or arrange an interview:
Carly Ryan, Hotwire
E: securecodewarrior@hotwireglobal.com
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
REV Ocean Appoints Paul Baribault as CEO Ahead of 2027 Global Operations29.10.2026 16:45:00 EET | Press release
REV Ocean has appointed Paul Baribault as Chief Executive Officer as the organization moves towards the international debut of its 195-metre research vessel in Rio de Janeiro in April 2027, alongside the UN Ocean Decade Conference. One of the world's largest privately owned research and exploration vessels, REV represents a major philanthropic investment in ocean science. With nine laboratories, advanced deep-sea exploration vehicles and dedicated collaboration facilities, it is designed to give scientists access to world-class research infrastructure and connect their discoveries with the people and institutions able to drive ocean protection. Baribault joins as REV Ocean moves from a decade of engineering and construction into international operations. His mandate will be to build the international partnerships, funding base and organization needed to turn REV Ocean’s scientific capabilities into lasting ocean impact. An experienced conservation and nonprofit leader, Baribault served
Holder Partners Launches Strategic Communications Practice and Appoints Ali Ponte as Director and Practice Lead29.10.2026 16:15:00 EET | Press release
Holder Partners, a multidisciplinary consulting and advisory firm, today announced the launch of its Strategic Communications practice and the appointment of Ali Ponte as Director and Practice Lead. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261027701219/en/ Ali Ponte, Director and Practice Lead of Holder Partners’ Strategic Communications practice. The practice advises leading companies and institutions, their boards, senior executives and counsel on communications, reputation and stakeholder considerations in complex matters and periods of significant change or opportunity. Each engagement is tailored to the client’s objectives and, where relevant, draws on Holder Partners’ broader advisory capabilities. Its strategic counsel, informed by research and analysis, helps clients assess the implications of a matter, anticipate stakeholder responses and communicate clearly and effectively. That work includes crisis preparedn
Accertify Formalizes Partner Ecosystem as Fraud, Payments, and Chargebacks Converge Into a Single Risk Surface29.10.2026 16:00:00 EET | Press release
Accertify, a leading fraud decisioning provider whose Predictive Yes Platform helps merchants say yes to more good customers, more revenue, and more growth, today announced the launch of the Accertify Partner Program, a formalized partnership ecosystem connecting payment providers, orchestrators, commerce platforms, and consultancies to Accertify’s network-powered fraud intelligence. Partners can join through two tracks. The Referral track lets partners make a single introduction while Accertify handles the sale, implementation, and support. The Reseller track lets partners sell Accertify on their own contract and own the client relationship and margin. Partners that integrate with Accertify follow a defined certification path, so clients get a tested, supported connection from day one. Every client a partner brings joins a consortium where good customers verified anywhere in the network get through faster everywhere, and bad actors seen anywhere are stopped everywhere. In 2025, Accert
Draslovka to Acquire ex-Natron Energy Battery IP, Completing a Vertically Integrated Western Sodium-Ion Value Chain29.10.2026 15:30:00 EET | Press release
Draslovka’s US-based subsidiary, COVORO MINING SOLUTIONS LLC (Covoro), the operator of one of the largest solid sodium cyanide plants in the world, today announced that it has agreed to acquire the intellectual property portfolio in Prussian Blue Analogue (PBA) and Prussian White Analogue (PWA) sodium-ion battery technology originally developed by Natron Energy. Prussian Blue and Prussian White Analogues are not a single material but a tunable family of framework materials, and the portfolio protects that family across the whole stack — active-material synthesis, electrodes, electrolytes, cell design and manufacturing, as well as complete battery systems — through issued and pending patents, trademarks, and manufacturing know-how, with protection extending into the mid-2040s. The agreement covers intellectual property and intangible assets only and was subject to review by the Committee on Foreign Investment in the United States (CFIUS), which granted clearance as a condition to closin
Veracode Finds First Meaningful Gain in AI Code Security Since 2025 as Average Pass Rate Hits 62%29.10.2026 15:27:00 EET | Press release
Veracode, the global leader in application risk management, today announced a jump from 56 percent to 62 percent in overall AI-generated code security, alongside a drop in vulnerabilities from 44 percent to 38 percent — the most significant improvement since the GenAI Code Security Report series began in July 2025. Anthropic's Claude Opus 5.5 and OpenAI's GPT-6-Sol co-lead the rankings at 73 percent, surpassing the previous high of 68 percent set by GPT-5.5 in July 2026. “We’ve been analysing code generated by multiple LLMs for more than a year. Until now, we have not seen a marked improvement in AI code security, despite consistently near-perfect functionality,” said Chris Wysopal, Co-founder & Chief Security Evangelist at Veracode. “This is the first time since running our study that we’ve been able to report a meaningful move on the security dial. Ten models now clear 60 percent, up from four in the last report, and the overall average has jumped six percentage points. With around h
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom