More organizations are adopting mature DevOps practices, with 26% having mature practices and 41% improving. Those with mature practices are more likely to automate security testing in their CI/CD pipelines. While container security is a top concern, many organizations may not have the necessary governance policies for managing open source components, which pose a growing risk of security breaches.

1. DOWLOAD FULL SURVEY
DOWLOAD FULL SURVEY
41 %
are improving
their maturity.
26 %
have mature
DevOps practices
2,292people shared their views with us this year.
58 %
with mature DevOps practices
have automated security testing
with CI/CD compared to 39% of all
survey participants.
Mature DevOps practices automate security early and everyhwere.
Container Concerns
DevSecOps Scales
DevOps is on the Rise
19 % 43 % 51 %60 %
Design / Architecture Development In ProductionDuring QA/Test
88 %
say security is
a top concern
when deploying
containers
53 %
have security
products to address
this concern
yet only
80% to 90% of a typical
application is composed of
components.
But only
57 %
have open source governance
policies to keep “bad” components
out of their software supply chains
50% increase
in verified or suspected breaches
related to open source components
from 2014-2017