DevSecOps has moved security front and center in the world of modern application development; however, security and development teams are driven by different metrics, making objective alignment challenging.  

This is further exacerbated by the move to microservices-driven architectures and the use of containers and serverless, which have shifted the dynamics of how developers build, test and deploy code.

As a result, a convergence of application security tools is underway. Organizations are overwhelmed with the amount of and overlap in issues raised from multiple testing tools, complicating prioritization and mitigation. So, integrated application security platforms are desired.

To gain insights into these trends, ESG surveyed 378 IT, cybersecurity and application development professionals at organizations involved with securing application development tools and processes.

This study sought to:

• Examine the buying intentions of application security teams regarding dev-time application security controls and gauge buyer preferences for different types of vendors’ application security solutions.
• Understand the trigger points influencing application security investments and how decision makers are prioritizing and timing purchasing decisions.
• Determine the extent to which security teams understand modern development and deployment practices, and where security controls are required to mitigate risk.
• Gain insights into the dynamics between development teams and cybersecurity teams with respect to the deployment and management of application security solutions.

 Download this report now!