Agentic AppSec: Securing code that agents help write
Software development is shifting from AI-assisted suggestions to agent-driven actions. Coding agents can work across repositories, call development tools, and complete multi-step tasks under human oversight. These workflows can accelerate development, but they also change where and how security controls must operate. Agentic AppSec brings established security testing and governance into these workflows.
The aim is consistent security testing, review, and governance for code, dependencies, and application changes, whether a person or an agent helped create them. That shouldn’t require slowing agents down or moving every team onto the same assistant.
Software accountability doesn’t change with the author
The reporting obligations in the European Union Cyber Resilience Act (CRA)took effect on September 11, 2026. Manufacturers must submit an early warning within 24 hours of becoming aware of an actively exploited vulnerability or a severe incident affecting the security of their product, followed by a full notification within 72 hours....
Copyright of this story solely belongs to blogs.opentext.com. To see the full text click HERE
