Announcing the 2025 State of Application Risk report

We’re pleased to announce the publication of our 2025 State of Application Risk report. Based on anonymized data collected through our platform over the past 18 months, this report gives a snapshot of where application security risk lives in the modern development environment.

Further, it offers guidance on avoiding the type of risk in your development environment that leads to headline-making supply chain attacks.

Download the report to understand:

• Where secrets are most often exposed, and how to reduce the risk
• The most common toxic combinations increasing enterprises’ application risk
• What types of SDLC misconfigurations are most common, which are the most risky, and how to avoid them
• The most common AppSec testing inefficiencies
• How GenAI is introducing risk in the development environment, and how to use it more securely

Start here to understand where the greatest application risks now lie, and to prioritize your own application security efforts.

White Paper from