ArmorCode & Purple Book Community
All Statistics
86% of respondents are already using or exploring generative AI tools in their security programmes.
84% said that supply chain vulnerabilities were the most significant threat to their enterprise applications.
Among those who have encountered issues with AI-generated code, 83% cited lack of transparency as major concerns.
65% believe AI will significantly reshape the AppSec function within the next year.
65% highlighted a lack of visibility across AppSec tools
Speed of software development outpacing security priorities was also a concern for 71%.
Among those who have encountered issues with AI-generated code, 92% reported insecure code as a concern.
76% of respondents named application security posture management (ASPM) as their top investment focus for 2025.
84% recognise the role of the AppSec leader as more important now than ever. More than 84% believe their role is more important now than it was a few years ago. This increased importance is linked to factors such as growing challenges from AI-generated code and open source software.
63% still report moderate or significant friction in getting developers to adopt security team feedback, despite increased DevSecOps collaboration.
Managing the sheer volume of vulnerabilities and false positives were the biggest challenges in securing code, cited by 78% of respondents.
Open-source risks and cloud misconfigurations followed supply chain vulnerabilities closely at 73%.
64% of organizations are growing their AppSec teams.