Almost 70% of all code developed in 2022 was AI-written.

Only a few companies have a solid strategy for protecting such code, and many of them are unaware of which AI software developers use for their tasks.

This is where this report comes in. Checkmarx questioned more than 1,500 cybersecurity experts including CISOs, AppSec Managers, and software developers from nine different countries. The objective was to find out how vibe coding and artificial intelligence can affect the security landscape and how each of these organizations should adjust to the new reality without impeding development.

What You Will Learn in This Report:

• How AI assistance transforms developers into curators and what consequences it may have in terms of code quality, accountability, and long-term skills acquisition
• Why shadow AI is the new shadow IT and why about one in five organizations knows that its developers use AI tools without any control measures
• What CISOs, AppSec Managers, and developers each need to do differently as their roles evolve alongside AI-powered development
• How agentic AI can close the gap between development velocity and security coverage, and what it looks like when it’s working in practice
• Where today’s AppSec programs are still stuck in reactive mode, and the specific steps that move teams toward automation-first, security-native workflows