The complexities of scaling App Sec teams and how to address them in 2025
Summary: PortSwigger's article lays out four challenges for AppSec teams scaling in 2025: growing application and API portfolios, a widening gap between security staff and responsibilities, security becoming a bottleneck in faster software delivery, and rising compliance demands. It cites one organization reporting a developer-to-security-professional ratio of 33:1 and another engineer describing the difficulty of managing 10,000 websites across internal and external assets, and it presents Burp Suite Enterprise Edition, a DAST product, as the response to each.
Key Takeaway: A 33:1 developer-to-security ratio means the team reviewing code and findings is outnumbered by the people shipping it, so any testing approach that depends on manual work will fall behind the portfolio it is meant to cover.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026