What developers think about application security might surprise you

A developer-centric survey and expert analysis highlight that security often lacks cultural priority in development teams, with software complexity, time pressure, and organizational obstacles as key challenges. While automation (SAST/SCA/secrets detection) is seen as essential, noisy results and integration hurdles reduce effectiveness; AI’s role is viewed with skepticism despite potential benefits, especially for API security. The report urges moving beyond legacy AppSec by emphasizing secure coding education, earlier and continuous security checks across the SDLC, and complementary techniques like binary analysis to better prioritize real threats and mitigate supply chain risks.