2023 Global DevSecOps Report Series

What’s next
in DevSecOps

Dive into the data for a complete picture of the state of DevSecOps in 2023.

Dev, sec, and ops weigh in on what’s working and what’s changing in software development.

In March 2023, we asked more than 5,000 DevSecOps professionals to share their opinions on the current state of software development, security, and operations. What are teams prioritizing in 2023? Where are things improving, and where are teams still running into roadblocks? What’s the latest on hot topics such as security, artificial intelligence and machine learning, and cloud computing? These are just a few of the big questions we set out to answer this year.

Read on for our snapshot of DevSecOps in 2023.

Dev(Sec)Ops takes over

of respondents reported using DevOps or DevSecOps methodologies, up from 47% in 2022.

The shift left gets real

of security professionals said they have either shifted security left or plan to in the next 3 years.

Too many tools

of survey respondents said they want to consolidate their toolchains.

The rise of AI is here

of developers who use AI/ML said they use it to check code, up from 51% in 2022.

Security without sacrifices

In the first installment of our 2023 Global DevSecOps Report Series, we examine where organizations are in their efforts to shift security left, or move security earlier in the software development lifecycle. What’s top of mind for DevSecOps teams when it comes to creating more secure applications? Where are teams seeing the biggest wins, and what work is left to be done?

Download the full report to explore all of the findings, or read on for the highlights.

AI: The new security status quo

Among devs who use AI/ML, more said that they use AI/ML to check code, that they use bots for testing, and that they use AI/ML for code review.

We use AI/ML to check code (separate from testing)

2023

2022

We use bots in our testing process

2023

2022

An AI/ML tool reviews code before we see it

2023

2022

We don't use AI/ML

2023

2022

Feeling the toolchain pressure

More than half of security respondents said they use 6 or more tools. This year there was also a drop in the number of security respondents who said they use 2-5 tools, and a corresponding increase in the number who said they use 6-10 tools.

of security respondents said they use 6 or more tools, compared to 48% of devs and 50% of ops.

Better collaboration

Easier automation

Better security

A more efficient DevOps practice

Cost and time savings

Teams want it all: Security and efficiency

Better security was one of the top benefits of a DevSecOps platform, according to respondents, along with a more efficient DevOps practice, easier automation, cost and time savings, and better collaboration.