What developers think about application security might surprise you

This article presents findings from a Jit survey of 150 developers showing that security is frequently not a cultural priority for development teams; software complexity, lack of training/time, and organizational priorities hinder AppSec; automated tools like SAST and SCA help but suffer from noisy results and poor integration; and developers remain cautious about AI-driven security tools. The piece emphasizes combining education, better tool integration, threat-aware testing (including binary analysis and SBOM checks), and human-in-the-loop practices across the SDLC to improve application security.