Why developer-focused security is needed from the start, from DevSecOps pioneer Snyk

Check out all the Smart Security Summit on-demand sessions here.

Developers (and, therefore, organizations) are increasingly relying on open source code because of its ease of use and its collaborative, scalable, flexible, and cost-effective nature. According to one estimate, 78% of the code in the codebases is open source.

At the same time, it is threatened due to a multitude of security issues: at least 81% of codebases with open source components contain at least one vulnerability.

This gave rise to DevSecOps, a method that introduces security earlier in the software development lifecycle.

"Software applications are built with developers acting on a modern assembly line, where they build applications by reusing software code from many places," said Peter McKay, CEO of the platform. security for Snyk developers. "Therefore, this means that any piece of code they use may contain security issues."

Event

On-Demand Smart Security Summit

Learn about the essential role of AI and ML in cybersecurity and industry-specific case studies. Watch the on-demand sessions today.

look here

To bolster its platform for developers to participate in the security process, Snyk this week announced a Series G funding round of $196.5 million. This brings the company's valuation to nearly $7.4 billion.

"In the creation process, developers shouldn't have to worry about security issues," McKay said. "They need flexibility, efficiency and peace of mind to perform at their best."

Putting security in the hands of developers — now

Developer-centric security empowers development teams by enabling analysis, testing, and remediation in development environments.

The concept is rapidly gaining traction, with the size of the DevSecOps market expected to reach $23.4 billion by 2028, up from $2.5 billion in 2020. Leading companies in the industry are Mend (formerly WhiteSource), Veracode, Lacework, Sysdig and Crowdsec.

As McKay noted, security issues are further compounded by the fact that "the role of the developer becomes an even more important piece of the puzzle of an organization's success".

Amid the struggle to hire strong cybersecurity talent, the number of global developers is expected to reach 45 million by the end of the decade (there are currently around 24.5 million developers).

"We can't just get out of this crisis on rented vehicles; we need to put security in the hands of developers now," McKay said.

Security built into the development lifecycle

Snyk, who claims to have pioneered developer security, helps eliminate security issues that would otherwise hinder development, McKay said. And in a way that doesn't slow developers down.

The Snyk SaaS platform allows developers to...