Veracode’s State of Software Security report for 2023 found that there is a 27% chance within a given month that security flaws will be introduced into an application. A number of factors were found to affect this chance including scan frequency, method of scanning, amount of developer education, and the application’s language. The report also found that JavaScript applications on average have fewer flaws and faster flaw resolution than Java and .NET applications.
The report reviewed all applications scanned within the Veracode platform. One key finding is that the choice of programming language has an effect on the types, quantity, and resolution of flaws. While JavaScript applications still introduce flaws, they tend to be resolved faster. This quicker resolution early in the application’s lifecycle leads to an improved resolution trend over time.
