New Research Reveals Companies Are Losing The Web Application Security War

Acunetix, a global leader in automated web application security testing, teamed up with Dimensional Research to learn how effectively companies are handling web application security. Security, DevOps, and C-suite professionals from 382 organizations across the globe responded to the survey; Acunetix analyzed the findings and today released a report, “Web Application Security – Enterprises are Losing the War.”

Companies are struggling to keep up with rapidly evolving threats and the need to automate security efforts. Attacks against web applications have increased in prevalence to become the single biggest cause of data breaches. As the battlefield shifts more and more from the network to the application, it is important to understand how companies are meeting this challenge.

Verizon’s 2020 Data Breach Investigation Report (DBIR), found that 43% of breaches could be traced back to attacks against web applications – more than double the results from last year. Equifax is a high-profile example of a web application data breach that exposed the personal information of 147 million people, costing the company $1.38 billion in settlements and security upgrades. 

According to the Acunetix report, 88% of companies now develop web applications in-house. Half of the respondents have been successful with their shift-left efforts and include web application security scans with every code build or during unit testing. However, that leaves half that don’t scan early enough and may incur major time and resource costs to remediate vulnerabilities. Remarkably, half of the respondents said that vulnerabilities are found faster than they can be fixed, meaning their web applications are open to an attack. 

Nearly 64% of enterprises still burden specialized security personnel with simple web application security testing that could be automated. And less than half of companies empower developers to run security scans on their own code. 

Here is a link to the final report:

Leave a Reply

%d bloggers like this: