The Great AppSec Reality Check: 2026 Survey Report
We asked 300+ CISOs, AppSec leaders and developers what their biggest challenges are with Agentic AI security, SCA, SAST and API Sec tools, and where they would like to invest next.
Newsflash - they're not happy.


New Investments in Agentic AI Security
More than 80% are very willing to buy new MCP and AI security tools, and replace their API Sec tools
.png?width=984&height=332&name=Frame%201948754519%20(1).png)
Agentic AI / Enterprise AI Security Gaps
Nearly 50% say traditional controls (prompts/tokens) for agentic AI don’t prevent production damage

The Greatest AppSec Wish
76% of CISOs and AppSec leaders say their top AppSec wish is real insight into what their apps are doing in production