Enterprises struggle with governance of AI-generated code

New research highlights the gap in governance structures as AI-generated code becomes integral to enterprise development.

New research from Salt Security highlights the persistent challenge enterprises face in governing AI-generated code. It reveals that ninety percent of security leaders harbour concerns over the security risks posed by such code.

The report, AI Coding Assistants and the New Security Challenge, highlights the significant rise in pressure on organisations to manage AI-assisted software development at scale.

  • 90% of security leaders are worried about AI-generated code.
  • 67% report widespread adoption of AI coding assistants.
  • 38% rely on manual review for code evaluation.
  • 29% see insecure coding patterns as a leading risk.
  • 15% are concerned about misalignment with security policies.

The research conducted among IT security leaders from the UK and the US indicates deep integration of AI coding assistants within enterprise development teams. Despite the rapid uptake—reported by 67% of firms—many have yet to establish effective governance structures to safeguard AI-generated code.

The study reveals a disconnect between the velocity of engineering processes and security oversight. While AI coding tools often strengthen software delivery rates, organisations cling to manual review methods ill-suited for modern, machine-paced development.

Findings also suggest that larger enterprises encounter greater challenges with AI adoption. Companies with over 500 employees are notably more concerned about enforcement consistency, developer overreliance, and governance complexity across distributed environments.

Salt Security's CEO underlines the impact of AI coding assistants on software construction. Yet, there's an acknowledgement that governance structures have yet to catch up, with many maintaining outdated security processes even as code volumes exponentially increase.

The research cautions against relying solely on manual reviews, as they prove inadequate for scaling operations involving AI-generated code. The potential for “security drift” arises with reviewer fatigue, inconsistent enforcement, and discrepancies between policy and practice.

In response, the report provides five strategic priorities to strengthen governance in AI-assisted development. These include improving code visibility, reducing manual review dependence, standardising secure development practices, and recognising AI coding assistants as integral to the software supply chain.

An examination of how Atlassian’s Rovo and Teamwork Graph introduce AI-driven automation into...
Smartsheet extends its AI integrations, offering enterprise teams new capabilities with Smart...
NetApp and Cisco introduce updated solutions with FlexPod, aiming to empower enterprises in...
Checkmarx and Carahsoft have forged a partnership to enhance application security solutions for...
New capability aims to improve visibility, monitoring, and control of AI agents in enterprise...
Hack The Box and Semperis form an alliance to strengthen cybersecurity through hands-on skills...
Craig Wilson to take the helm of Sopra Steria UK, focusing on growth and innovation in technology...
Despite significant investments, UK industrial companies face divided views on digital...