NEW YORK, April 25, 2023 /PRNewswire/ — Datadog, Inc. (NASDAQ: DDOG), the monitoring and safety platform for cloud functions, right now launched its 2023 State of Software Safety Report. To raised perceive the present vulnerabilities and threats focusing on DevOps organizations, researchers evaluated real-world knowledge from 1000’s of Datadog clients. In keeping with the report, solely three p.c of vital vulnerabilities are actually excessive danger and price prioritizing.
The emergence of widespread vulnerabilities and the significance of quickly discovering susceptible functions means the onus is on DevOps groups to remain forward of threats whereas sustaining launch velocity and making certain environment friendly use of safety budgets. All vulnerabilities rated vital by the Frequent Vulnerability Scoring System (CVSS) get prioritized for fixes by utility and safety groups. Nonetheless, in response to Datadog’s 2023 State of Software Safety Report, solely three p.c of vulnerabilities rated as vital by the CVSS are literally value prioritizing.
The analysis report in contrast the usual CVSS severity rating with a modified severity rating that accounts for runtime context. This strategy considers proof of suspicious site visitors, in addition to internet-exposed or delicate environments. In consequence, ninety seven p.c of vulnerabilities labeled as vital by CVSS might be downgraded and assigned a decrease severity rating.
“In right now’s macroeconomic surroundings, it’s extra essential than ever to optimize prices wherever potential. For safety groups, meaning there’s elevated stress to search out and repair the vulnerabilities that may most influence the enterprise,” stated Emilio Escobar, Chief Data Safety Officer at Datadog. “The findings within the State of Software Safety Report present that there’s a clear path to maximizing the effectivity of safety budgets this yr by prioritizing the three p.c of vulnerabilities which are really vital and may have the best influence on the group’s safety posture.”
Different findings from the report embody:
- One out of each ten assaults focused non-production environments.
- Seven out of ten assaults did not succeed as a result of they focused the flawed programming language, working techniques or vulnerabilities.
- Java companies have essentially the most vital vulnerabilities whereas Python companies have the fewest.
The 2023 State of Software Safety Report is on the market now. Learn the complete report right here: https://www.datadoghq.com/state-of-application-security.
About Datadog
Datadog is the observability and safety platform for cloud functions. Our SaaS platform integrates and automates infrastructure monitoring, utility efficiency monitoring, log administration, real-user monitoring, and plenty of different capabilities to offer unified, real-time observability and safety for our clients’ whole expertise stack. Datadog is utilized by organizations of all sizes and throughout a variety of industries to allow digital transformation and cloud migration, drive collaboration amongst improvement, operations, safety and enterprise groups, speed up time to marketplace for functions, scale back time to downside decision, safe functions and infrastructure, perceive consumer conduct, and monitor key enterprise metrics.
Ahead-Wanting Statements
This press launch might embody sure “forward-looking statements” inside the that means of Part 27A of the Securities Act of 1933, as amended, or the Securities Act, and Part 21E of the Securities Trade Act of 1934, as amended together with statements on the advantages of recent merchandise and options. These forward-looking statements mirror our present views about our plans, intentions, expectations, methods and prospects, that are primarily based on the knowledge presently out there to us and on assumptions we’ve made. Precise outcomes might differ materially from these described within the forward-looking statements and are topic to a wide range of assumptions, uncertainties, dangers and components which are past our management, together with these dangers detailed below the caption “Danger Elements” and elsewhere in our Securities and Trade Fee filings and studies, together with the Annual Report on Type 10-Ok filed with the Securities and Trade Fee on February 24, 2023, in addition to future filings and studies by us. Besides as required by regulation, we undertake no responsibility or obligation to replace any forward-looking statements contained on this launch because of new info, future occasions, adjustments in expectations or in any other case.