Survey: 70% of developers say AI code has more vulnerabilities, 30% ship it anyway
By
Tim Anderson
A baker's-dozen of insight crammed into one ring.
Summary
A Checkmarx survey of 2,350 developers, CISOs, and AppSec managers reveals that 70% of developers believe AI-generated code contains more vulnerabilities than human-written code, yet 30% knowingly ship vulnerable AI code into production. The pressure to deploy quickly often overrides security concerns, with four in five organizations reporting breaches from vulnerable applications. The report shows a 54% increase in respondents compared to last year's survey.
Key quotes
· 3 pulled70 percent of developers believe AI-generated code has more vulnerabilities
30 percent knowingly ship vulnerable code into production
Pressure to deploy wins out over security as four in five orgs confess to breaches from vulnerable apps
You might also wanna read
Survey: Senior developers ship 2.5x more AI-generated code than junior developers
Fastly's July 2025 survey of 791 developers reveals that senior developers (10+ years experience) ship nearly 2.5 times more AI-generated co
fastly.com·9mo ago
Study: AI-generated code creates 1.7 times more issues than human-written code
A study analyzing 470 open-source GitHub pull requests found that AI-generated code creates 1.7 times more issues compared to human-written
coderabbit.ai·5mo ago
The Hidden Costs and Risks of AI-Assisted Coding
The article critiques AI coding tools, arguing that while they can generate impressive-looking code quickly, they often produce flawed resul
notes.visaint.space·2mo ago
Developer Frustration with AI-Generated Code Quality in Software Development
A software developer expresses frustration with the proliferation of AI-generated code in professional settings, observing that 8 companies
news.ycombinator.com·8mo ago
Critique of AI-Generated Code and the Problem of 'Vibe-Coding' in Software Development
The article critiques the problematic use of AI tools like LLMs in software development, particularly focusing on 'vibe-coding' where develo
acko.net·3mo ago
KeePassXC Implements New Policy for AI-Generated Code and Maintains Rigorous Quality Control Process
KeePassXC, a popular open-source password manager, has implemented a robust quality control process for its security-critical code. The proj
keepassxc.org·7mo ago