Veracode – State of Software Security 2025

The main topic of the report concerns the state of software security in 2025, with a focus on maturity and risk management.

Key findings include an increase in software threats and the growth of vulnerability exploits, an increase in 'security debt' and the complexity of the attack surface, the impact of artificial intelligence on engineering processes and the risk landscape, the importance of complying with new regulatory requirements in the US and EU, such as the Cyber Resilience Act and Cybersecurity Executive Order, and the need to understand and manage software risks.