Organizations can substantially lower vulnerabilities with secure-by-design practices, report finds

Secure Code Warrior analyzed nine years of data from 600 enterprise customers and found that organizations training developers in secure-by-design practices can reduce software vulnerabilities substantially (47–53% for firms with >7,000 trained developers; combined case studies showed 20–80% reductions). The report highlights low global adoption (≈4% of developers using CISA practices), notes NIST estimates that fixing defects late is far more costly, and recommends top-down mandates and industry upskilling to accelerate secure-by-design adoption across critical sectors.