Security issues in software development often stem not from developers’ lack of concern but from a fundamental disconnect between development and security teams. Each wants to do their job well, but their goals and expectations frequently conflict. This misalignment costs organizations in heightened security risks and tangible operational setbacks. Security issues identified too late in the cycle delay releases and increase project costs.

Protecting humans means protecting the tools humans use. Human risk management (HRM) means reducing human-based risk, or in our particular area, human-based cybersecurity risk. Study after study has shown that, in one way or another, humans are involved in the vast majority of cybersecurity incidents.

Last October marked a turning point for ThreatSpike. Not only did we start the conversations around our Series A funding round. But also the mission expanded, not just to protect companies from cyber threats, but to give any business, of any size, access to IT and security at a standard most people assumed was only possible for global corporations.

Today, at Fal.Con 2025, I am delighted to announce CrowdStrike’s intent to acquire AI security leader Pangea. With this acquisition, CrowdStrike will pioneer the category of AI detection and response (AIDR) as we secure enterprise AI development and use across the data, models, agents, identities, infrastructure, and interactions making up the AI lifecycle.

It seems like Artificial Intelligence (AI) has suddenly appeared in everything, everywhere, all at once. What feels like “five minutes ago”, there was “pre-AI life”, and now we have AI assistants that speak like real people, apps that create images, music, and video from nothing, and AI agents that do work for us.

Security teams know all too well the grind of manual investigations and remediation. With the mass adoption of AI and increasingly automated attacks, defenders cannot afford to rely on overly manual, low priority, and complex workflows. Heavily burdensome manual response introduces delays as analysts bounce between consoles and high alert volumes, contributing to alert fatigue. Even worse, it prevents security teams from dedicating time to high-priority threats and strategic, innovative work.

Veracode is proud to announce our recognition as a Leader in The Forrester Wave: Static Application Security Testing (SAST) Solutions, Q3 2025. We believe this acknowledgment from a leading analyst firm reflects our relentless focus on innovation, customer success, and our vision for a secure, developer-first future. The Forrester Wave serves as an essential guide for technology buyers, and this report offers a comprehensive look at the 10 most significant SAST providers.