What are App Sec leaders prioritizing in 2021? The survey results are in
Summary: PortSwigger surveyed its community on application security maturity and priorities, and reports that over a third of companies said their AppSec team is responsible for more than 200 applications. Respondents cited automation as the main budget investment, with 58% pointing to freeing up AppSec time and resources, 56% to scaling scanning across more applications, 44% to serving development teams, and 42% to saving costs, while nearly two-thirds said they are investing in training and upskilling existing security staff.
Bottom line: More than a third of surveyed companies have AppSec teams answerable for over 200 applications each, and the stated plan is to absorb that load through automation and upskilling rather than headcount - a bet that the existing team's time can be redirected to the harder vulnerabilities.
Read the original at PortSwigger Research ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026