Research report·
Impact of Platform Strategies on Security Practices in Software Development
Organisations without DevOps standardisation show between two and three times lower rates of integrating security practices into their CI/CD pipelines
This report examines the security practices that developers integrate into their CI/CD pipelines, with a particular focus on how platform standardisation approaches influence which security tools see adoption and success. In this report, platform standardisation refers to organisation-wide standardisation strategies for DevOps practices, and we categorise platform configurations into five distinct groups: specialised internal developer platforms (IDPs), dedicated teams or individuals responsible for developer experience, unified systems for managing DevOps processes, curated lists of approved tools, and organisations engaging in none of these approaches. This report is based on data from SlashData’s 30th edition of the Developer Nation survey and represents the adoption patterns of more than 4,700 professional developers using CI/CD pipelines.