Reality Check on Securing AI-Generated Code

Security Professionals on the Pains, Plans, and Priorities Around AI-Generated Code

There’s a lot of buzz around AI use in software development and security. But what’s the reality? Are development teams truly handing the coding reins over to AI? And are security teams leveraging AI to find and fix code vulnerabilities? How do these teams feel about AI in software development, and do they have concerns? We recently surveyed 117 security leaders to find out.

Key takeways:

• 82% Are using or experimenting with AI code assistants.
• 73% Cite the introduction of new vulnerabilities as a top concern around AI-led development. 56% cite lack of visibility or control over AI-generated code as a top concern.
• 82% Report some or no confidence in their visibility into AI being used in development.
• 3/4 Say securing AI-generated code is a top or high AppSec priority in the short term.
• 62% Say AppSec will soon evolve to become purpose-built AI security tools integrated into AI IDEs.
• 60% Say developers will soon use or are already using AI for security tasks, rather than relying on traditional AppSec tools and teams.