The convergence of application development, artificial intelligence and security is transforming how organizations build and maintain software, driving the rise of DevSecOps.

In the latest episode of theCUBE Research’s AppDevANGLE podcast, Jack Poller (right), founder and principal analyst of Paradigm Technica, discusses the biggest trends shaping the future of DevSecOps.

AI, security and the consolidation of DevOps tooling

AI-driven automation is reshaping software development, but it comes with risks. While organizations are eager to use AI for efficiency, security remains a key concern. Organizations are looking to AI to replace developers, but AI alone is not enough. Security vulnerabilities can arise if AI-generated code isn’t properly reviewed.

At the same time, organizations are consolidating DevOps tooling into unified platforms to streamline workflows. One key motivator for consolidation is addressing productivity constraints, evidenced by developers spending only 24% of their time writing code. By unifying tools, organizations aim to enhance workflows and enable developers to focus more on value-driven tasks. In fact, by the end of 2025, 50% of enterprises are expected to have adopted consolidated DevOps solutions. However, these platforms must integrate security seamlessly to be effective.

DevSecOps: From afterthought to requirement

The push toward DevSecOps is accelerating due to the growing recognition of its importance, but adoption is still lagging significantly, according to Poller. Many organizations continue to treat security as an afterthought, bolting it on late rather than embedding it from the start.

“Over 60% of organizations are embedding DevSecOps as a fundamental practice, but why isn’t it 100%?” Poller asked. “Security should be embedded from the start, not treated as a secondary concern.”

With increasing threats, compliance regulations and AI-driven security measures, organizations must evolve their security posture. Those who prioritize security within their DevOps workflows will be better positioned to mitigate risks and ensure software resilience, according to Poller.

Final thoughts

Looking forward, organizations that embrace AI responsibly and integrate security into their development lifecycles will lead the industry. By leveraging AI for tasks, such as vulnerability scanning and compliance monitoring, companies can strengthen security without disrupting development speed.

The intersection of security, AI and application development is becoming crucial. Companies that embed security early in their processes will have a competitive edge heading into 2025 and the years that follow.

Here’s the full discussion, part of theCUBE Research’s AppDevANGLE podcast series:

Photo: SiliconANGLE