Firms skip security reviews of major app updates about half the time

A report summarizing CrowdStrike’s 2024 State of Application Security highlights that major code updates undergo security review about 54% of the time among 400 surveyed US security managers, with reviews typically taking 1–5 days and involving large teams, driving estimated annual costs up to $1.2M (or $188K using median figures). The survey attributes friction to tool sprawl (most use multiple detection tools and manual methods), misaligned tools and technology (noted by 52%), and difficulty prioritizing fixes (61%), concluding that organizations need to strengthen application and API security posture.