The state of development: 5 AppSec action items

This piece outlines five priorities for AppSec amid AI-accelerated software delivery: keep shift-left developer-friendly with actionable, high-signal findings in CI/CD and IDEs; automate SBOM generation, policy checks, and dependency currency; embed secure-by-design practices for APIs with real-time visibility; harden and isolate AI workloads in containers with least privilege and up-to-date components; and prepare for GenAI-specific threats (e.g., prompt injection, data poisoning) via governance, secure data pipelines, and threat modeling, while emphasizing collaboration, automation, and robust testing to sustain security at the speed of code.