SANS Application & API Security Survey 2024

Technologies like containers, development methodologies such as DevSecOps, and coding practices including the use of open source code and GenAI have increased both the velocity and complexity of the development process. Security teams are now challenged to keep pace with and secure this complex and expanding attack surface.

AppSec and API testing capabilities have adapted and improved in response to these changing AppSec architectures. Solutions like penetration testing, DAST, SCA, and SAST all have a role to play. Yet, penetration testing offers a clear and impactful path forward by validating exposures and ensuring security teams are targeted in their efforts to secure the organization against growing risk.

The SANS report reveals findings and recommendations from security leaders on which AppSec and API testing technologies are used most widely, how these technologies are being applied across a complex environment, and how to get the most out of these much needed security solutions.