How AI and security are reshaping DevSecOps and DevOps tooling

The convergence of application development, artificial intelligence and security is transforming how organizations build and maintain software, driving the rise of DevSecOps.

In the latest episode of theCUBE Research’s AppDevANGLE podcast, Paul Nashawaty (pictured, left), principal analyst at SiliconANGLE Media, joins Jack Poller (right), founder and principal analyst of Paradigm Technica. Their discussion highlights the biggest trends shaping the future of DevSecOps.

AI, security and the consolidation of DevOps tooling

AI-driven automation is reshaping software development, but it comes with risks. While organizations are eager to use AI for efficiency, security remains a key concern.

“Organizations are looking to AI to replace developers, but AI alone is not enough,” Nashawaty said. “Security vulnerabilities can arise if AI-generated code isn’t properly reviewed.”

At the same time, organizations are consolidating DevOps tooling into unified platforms to streamline workflows. One key motivator for consolidation is addressing productivity constraints, evidenced by developers spending only 24% of their time writing code, according to Nashawaty. By unifying tools, organizations aim to enhance workflows and enable developers to focus more on value-driven tasks.

“By the end of 2025, we expect 50% of enterprises to have adopted consolidated DevOps solutions,” Nashawaty explained. “However, these platforms must integrate security seamlessly to be effective.”

DevSecOps: From afterthought to requirement

The push toward DevSecOps is accelerating due to the growing recognition of its importance, but adoption is still lagging significantly, according to Poller. Many organizations continue to treat security as an afterthought, bolting it on late rather than embedding it from the start.

“Over 60% of organizations are embedding DevSecOps as a fundamental practice, but why isn’t it 100%?” Poller asked. “Security should be embedded from the start, not treated as a secondary concern.”

With increasing threats, compliance regulations and AI-driven security measures, organizations must evolve their security posture. Those who prioritize security within their DevOps workflows will be better positioned to mitigate risks and ensure software resilience, according to Poller and Nashawaty.

Final thoughts

Looking forward, organizations that embrace AI responsibly and integrate security into their development lifecycles will lead the industry. By leveraging AI for tasks, such as vulnerability scanning and compliance monitoring, companies can strengthen security without disrupting development speed, according to Nashawaty.

“We’re at a turning point where security, AI and application development must converge,” Nashawaty concluded. “Organizations that prioritize security from the start will be best positioned for success in 2025 and beyond.”

Here’s the full discussion, part of theCUBE Research’s AppDevANGLE podcast series:

Photo: SiliconANGLE