“AI Is an Amplifier—Proactive AppSec Is Business Imperative”

History has a rhythm—moments when technology doesn’t just evolve, it leaps. The telegraph overtook the Pony Express. The internet rewrote the rules of knowledge. Today, AI is redefining how we work, innovate, and build the future. 

Recent research from the inaugural DORA State of AI-Assisted Software Development Report (Checkmarx is a proud sponsor) reveals that 90% of technologists now use AI at work, with most relying on it regularly and reporting measurable gains in productivity and code quality. These findings are echoed in a recent Forbes interview with our CEO, Sandeep Juhri, where senior contributor Tony Bradley spotlighted how seamlessly embedded AI agents are now working alongside developers instead of chasing vulnerabilities after the fact. 
 
Together, the DORA report and the Forbes feature paint a clear picture: AI is now pervasive in competitive organizations, reshaping not just development and operations, but also decision-making and security practices across the business landscape. 

This is good for productivity and organizational velocity, but it comes with new risks. As AI-generated code becomes more common, so do vulnerabilities. Auto-generated code can be two to three times more susceptible to security flaws compared to traditionally written code—creating new openings for hackers and bad actors. 

With 99% of development teams using AI for code generation, company systems must be ready to manage AI-driven risk. This is the moment AppSec has become proactive. Security is no longer just a gate. It is a vigilant sentry, embedded, continuous, and developer-focused, guiding and protecting them as the software landscape transforms. 
 
That is exactly why we built Checkmarx One: a unified, cloud‑native AppSec platform that correlates risk across SAST, SCA, IaC, API, containers, and more—so teams go from found to fixed faster, with prioritized, actionable remediation. We flag and fix vulnerabilities at the best time: before they happen, directly in the Integrated Development Environment. And with AI Query Builders and AI‑Guided Remediation, we put secure‑by‑design into the IDE, letting developers generate custom security scans and fix issues instantly with smart, contextual guidance. 

DORA’s message is clear, and Sandeep’s observations reinforce it: organizations must invest in the systems, platforms, data, and practices that not only amplify AI’s benefits but also safeguard against its risks. Proactive AppSec is central to that shift, and we are committed to helping every developer driving innovation move at AI speed, safely and efficiently.