A part of the SD Occasions 100 2026 sequence. See the full SD Occasions 100 2026 record for each class and honoree.
Software safety has spent years maturing round a comparatively steady assumption: a human wrote the code, a human could be skilled to put in writing it extra securely, and instruments exist to catch what people miss. That assumption is underneath actual strain in 2026. A rising share of code now originates from AI assistants and autonomous brokers, open-source dependencies stay a main assault vector, and AI techniques themselves have launched fully new classes of threat that didn’t exist a number of years in the past. The Safety, Belief & Governance class on this yr’s SD Occasions 100 displays an business working to catch as much as all three realities without delay.
For growth leaders, this class is not one thing handy off fully to a safety staff and examine in on quarterly. Safety, utility threat, and AI governance have turn out to be shut sufficient to core engineering issues that the best organizations deal with them as a shared accountability between safety and engineering management, not a handoff between two separate worlds.
Why This Class Issues Now
AI-generated code wants totally different safety scrutiny than human-written code. AI coding assistants can introduce delicate vulnerabilities, insecure default patterns realized from coaching knowledge, or outright incorrect logic that appears believable. Safety tooling and practices constructed across the assumption of human authorship want actual adjustment, together with scanning approaches and evaluate processes particularly tuned to the failure patterns AI-generated code tends to supply.
Software program provide chain threat has solely intensified. Open-source dependency threat, software program invoice of supplies necessities, and the broader software program provide chain safety dialog that’s been constructing for years has not slowed down, and if something has gained urgency as AI instruments pull in dependencies and packages quicker than human reviewers can all the time vet them.
AI governance and mannequin threat administration are actually distinct disciplines. Deploying an AI mannequin or characteristic into manufacturing introduces dangers that conventional utility safety tooling wasn’t constructed to catch: mannequin bias, hallucination, immediate injection, knowledge leakage by means of mannequin outputs, and explainability necessities that matter for each regulatory compliance and fundamental belief. This has created actual demand for tooling purpose-built round AI mannequin observability and governance, distinct from conventional appsec.
Entry governance has to increase to each people and AI brokers. As AI brokers are given the power to take motion, generally autonomously, the query of who or what is permitted to do what has expanded nicely past conventional human role-based entry management, requiring extra granular, dynamic authorization fashions that may scope an agent’s permissions tightly and regulate them based mostly on context.
The Totally different Segments Inside This Class
Cloud-native utility safety. Aqua Safety anchors this section, securing containerized and cloud-native purposes throughout the construct, deploy, and runtime lifecycle, an space that’s solely grown extra advanced as extra workloads, together with AI inference workloads, run in containerized cloud environments.
Software safety posture administration. ArmorCode represents a section targeted on aggregating and correlating findings throughout the numerous particular person safety instruments a company runs, giving safety and engineering leaders a unified, prioritized view of threat somewhat than a dozen disconnected software dashboards.
AI-native safety and governance. AISLE displays the most recent wave on this class: safety tooling constructed particularly for the dangers launched by AI techniques themselves, an space nonetheless actively defining its personal greatest practices because the threats it addresses are nonetheless being found in actual time.
Static and dynamic utility safety testing. Checkmarx and Veracode anchor the normal core of utility safety testing, scanning code for vulnerabilities earlier than and after deployment. Each have invested considerably in adapting their scanning approaches particularly to catch the patterns of vulnerability that AI-generated code tends to introduce.
Runtime utility safety. Distinction Safety occupies a definite place, specializing in instrumenting purposes to detect and block assaults in actual time as they run, somewhat than solely scanning code earlier than deployment, which offers a complementary layer of protection in opposition to vulnerabilities that static evaluation alone can miss.
Developer-first vulnerability administration. Snyk constructed its repute particularly on integrating safety scanning instantly into developer workflows somewhat than treating safety as a separate gate, a philosophy that’s turn out to be the default expectation throughout this class broadly.
Open-source and software program composition evaluation. Sonatype and BlackDuck anchor the section targeted particularly on understanding and securing the open-source elements and dependencies that make up the big majority of most trendy codebases, an space of sustained significance as provide chain safety necessities (together with SBOM technology) have turn out to be normal follow or regulatory requirement in lots of industries.
Safety data and occasion administration. Splunk represents the broader safety operations and observability layer, correlating safety sign throughout a company’s full expertise footprint, with rising emphasis on utilizing AI to assist safety groups triage the identical quantity and complexity challenges that operations groups face.
Safe coding training. Safety Journey (2026 Addition) focuses on constructing safe coding ability and consciousness instantly into developer coaching, on the speculation that stopping vulnerabilities on the level of creation is extra environment friendly than catching them downstream.
AI mannequin observability and belief. Fiddler AI (2026 Addition) addresses the mannequin governance facet of this class instantly: monitoring AI fashions in manufacturing for bias, drift, and explainability, giving organizations the power to know and belief what their AI techniques are literally doing.
High-quality-grained authorization. Allow.io represents a section with renewed relevance particularly due to AI brokers: offering the fine-grained, dynamic authorization infrastructure wanted to manage exactly what a human person or an autonomous agent is allowed to do, in environments the place coarse role-based entry management isn’t exact sufficient.
The clearest sample in mature safety practices is shifting safety scanning earlier and making it steady somewhat than gate-based, embedding scanning instantly into developer workflows and CI/CD pipelines somewhat than treating safety evaluate as a separate, sequential step. This sample predates the present AI wave however has turn out to be extra vital as code velocity will increase.
A genuinely new sample is the emergence of devoted evaluate and scanning particularly for AI-generated code, recognizing that the vulnerability patterns it tends to introduce differ considerably from typical human-introduced vulnerabilities. Some organizations now flag AI-generated parts of a change explicitly so reviewers and automatic instruments can apply further scrutiny.
On the AI governance facet, organizations deploying AI options into regulated or delicate contexts are constructing formal mannequin threat administration practices, generally for the primary time, borrowing construction from present threat and compliance capabilities however adapting it for AI-specific issues like hallucination, bias, and explainability.
Lastly, authorization structure is being actively rebuilt in lots of organizations particularly to accommodate AI brokers as actors that want scoped, auditable permissions, somewhat than retrofitting present human-oriented entry management techniques and hoping they generalize safely.
- Does it have a selected reply for AI-generated code, or is that an afterthought? Ask distributors instantly how their scanning or detection method accounts for the vulnerability patterns frequent in AI-generated code, somewhat than assuming conventional scanning generalizes completely.
- How nicely does it combine into present developer workflows? Safety instruments that require a separate, disconnected evaluate course of are likely to get bypassed or deprioritized underneath deadline strain. Instruments embedded instantly into the event workflow get used constantly.
- Does authorization lengthen cleanly to non-human actors? As AI brokers tackle extra autonomous duties, authorization and entry governance tooling must deal with agent identities and scoped permissions as a first-class case, not a workaround.
- What’s the precise signal-to-noise ratio? Safety tooling that generates extreme false positives trains each safety and engineering groups to disregard alerts, which is its personal important threat. Ask for actual buyer knowledge on resolved-versus-dismissed discovering charges.
The 2026 Honorees in Safety, Belief & Governance
- Aqua Safety — Cloud-native utility safety throughout construct, deploy, and runtime.
- ArmorCode — Software safety posture administration unifying findings throughout instruments.
- AISLE — AI-native safety and governance for dangers launched by AI techniques.
- Checkmarx — Static and dynamic utility safety testing platform.
- Distinction Safety — Runtime utility safety and assault detection.
- Snyk — Developer-first vulnerability administration built-in into workflows.
- Sonatype — Open-source software program composition evaluation and provide chain safety.
- Splunk — Safety data, occasion administration, and observability platform.
- BlackDuck — Software program composition evaluation and open-source threat administration.
- Veracode — Software safety testing throughout the software program growth lifecycle.
- Safety Journey (2026 Addition) — Safe coding training and developer safety coaching.
- Fiddler AI (2026 Addition) — AI mannequin observability, bias detection, and explainability platform.
- Allow.io — High-quality-grained, dynamic authorization infrastructure for customers and AI brokers.
Often Requested Questions
Does AI-generated code truly introduce totally different vulnerabilities than human-written code? Analysis and subject expertise each recommend AI-generated code can introduce particular recurring patterns, equivalent to insecure defaults realized from coaching knowledge or subtly incorrect logic that appears superficially right, that will not be the identical patterns conventional safe coding coaching and evaluate processes had been tuned to catch. That is an energetic and evolving space, and safety tooling distributors are actively adapting scanning approaches accordingly.
What’s the distinction between software program composition evaluation and conventional utility safety testing? Software program composition evaluation focuses particularly on the open-source and third-party elements and dependencies inside an utility, figuring out identified vulnerabilities and license dangers in code a company didn’t write itself. Conventional static and dynamic utility safety testing focuses on vulnerabilities within the customized code a company truly wrote.
What does “AI governance” imply in sensible phrases for an engineering staff? It usually means having an outlined course of and tooling for monitoring AI fashions and options in manufacturing for points like bias, inaccurate or dangerous output, knowledge leakage, and explainability, together with clear possession for who’s accountable when one thing goes mistaken. For regulated industries, it more and more additionally means documentation and audit trails adequate to fulfill exterior compliance necessities.
Why does authorization infrastructure want to alter for AI brokers particularly? Conventional role-based entry management was designed round a comparatively small, steady set of human roles. AI brokers may have dynamic, context-dependent permissions that change based mostly on the precise job they’re performing, and organizations want fine-grained authorization techniques able to expressing and implementing these extra advanced guidelines in actual time.
How will we keep away from safety tooling fatigue when adopting extra instruments on this class? Prioritize instruments that combine instantly into present developer and safety workflows somewhat than requiring separate dashboards and processes, and consolidate findings right into a unified view the place attainable, since safety groups that should examine a dozen disconnected instruments day by day are likely to develop the identical fatigue and missed-signal issues as builders going through too many disconnected alerts.
This text is a part of the SD Occasions 100 2026 sequence exploring the classes and firms shaping software program growth this yr. Learn the full SD Occasions 100 2026 record for the entire roundup.
