Security in software development is now seen as a collaborative effort rather than a specialized function, according to Docker's 2025 State of Application Development Report.
Roles in organizations are blending, and security is a concern across all functions, with just 1 in 5 organizations outsourcing security.
In larger organizations, security is more likely to be handled exclusively by security engineers.
Team leads and developers of various experience levels are now focusing on security, illustrating its integration into every aspect of development.
During security incidents, all team members collaborate to address vulnerabilities, with fixing vulnerabilities being a time-consuming task.
Security isn't the main bottleneck in development processes, with planning and execution taking precedence.
The concept of 'shift security left' is becoming less prominent in comparison to trends like AI and infrastructure as code, but it still holds influence.
Ultimately, security is no longer a barrier but an inherent part of development, emphasizing the importance of continuous improvement.