Companies Rely on Cloud Native for More Than Half of New Applications
December 11, 2018

Companies expect increased reliance on Cloud Native Applications (CNAs), however security concerns could prove to be a major obstacle, according to The State of Cloud Native Security, commissioned by Capsule8, Duo Security, and Signal Sciences.

62 percent of companies ... rely on cloud native for more than half of their new applications

As organizations seek to modernize infrastructure, CNAs provide huge opportunities to increase reach, scale and efficiency. Cloud native adoption is significantly on the rise, with 62 percent of companies noting that they rely on cloud native for more than half of their new applications. That figure is expected to grow to more than 80 percent over the next three years. However, businesses are keenly aware of the potential security risks that come along with it and more than half of those surveyed (56 percent) believe cloud native increases risk.

Fueling the concern over cyberattacks is their explosive growth, which shows no signs of slowing. According to the survey, 80 percent of respondents note attacks have increased at a rate of 2x or more over the last year. This is of particular concern when it comes to modern infrastructure, as production environments are not adequately protected for the amount of critical information they hold. Attacks on production environments levy significant consequences, with nearly half of those surveyed (48 percent) noting an attack has delivered damage to the system itself. Furthermore, 44 percent of those surveyed said an attack on production infrastructure has resulted in the loss of customer data.

Some additional key findings include:

■ As attacks increase, so does the rate of security alerts; only about one-third of the organizations surveyed are able to respond to more than 75 percent of alerts

■ Organizations have limited real-time visibility into attacks; 73 percent say they lack actionable, fine-grain, real-time insight into threats and ongoing attacks

■ False positives continue to plague IT and security organizations; 46 percent of those surveyed said that more than half of production environment security alerts were false positives

■ Poor analytics are the number one cause of false positives; nearly half reported this to be the primary issue

■ Organizations struggle to balance security with efficient deployment of production applications; 40 percent of those surveyed do not currently have a DevOps function in place – amongst those, half said the lack of appropriate skills on the security team was the primary obstacle

Overall, the benefits of modernizing production infrastructure, through cloud native deployments, are clear. To take advantage of all that cloud has to offer, businesses must understand their current posture; establish a roadmap for integrating Cybersecurity capabilities into DevOps; and push for the visibility required across this critical business infrastructure.

Methodology: In August 2018, Capsule8, Duo and Signal Sciences surveyed 486 senior-level information technology (IT) and IT security (IT sec) decision makers. The web-based survey was executed by ResearchNow. All respondents were qualified to be senior-level decision makers with roles including CIO, CISO, VP of IT, Director of IT and senior cloud security architect, among others. All respondents are employed by companies with at least $250 million in annual revenue. Half represent companies with revenue between $250-999 million; half come from organizations with greater than $1 billion annual revenue.

Share this

Industry News

November 07, 2024

Broadcom announced the general availability of VMware Tanzu Platform 10 that establishes a new layer of abstraction across Cloud Foundry infrastructure foundations to make it easier, faster, and less expensive to bring new applications, including GenAI applications, to production.

November 07, 2024

Tricentis announced the expansion of its test management and analytics platform, Tricentis qTest, with the launch of Tricentis qTest Copilot.

November 07, 2024

Redgate is introducing two new machine learning (ML) and artificial intelligence (AI) powered capabilities in its test data management and database monitoring solutions.

November 07, 2024

Upbound announced significant advancements to its platform, targeting enterprises building self-service cloud environments for their developers and machine learning engineers.

November 07, 2024

Edera announced the availability of Am I Isolated, an open source container security benchmark that probes users runtime environments and tests for container isolation.

November 06, 2024

Progress announced 10 years of partnership with emt Distribution — a leading cybersecurity distributor in the Middle East and Africa.

November 06, 2024

Port announced $35 million in Series B funding, bringing its total funding to $58M to date.

November 05, 2024

Parasoft has made another step in strategically integrating AI and ML quality enhancements where development teams need them most, such as using natural language for troubleshooting or checking code in real time.

November 05, 2024

MuleSoft announced the general availability of full lifecycle AsyncAPI support, enabling organizations to power AI agents with real-time data through seamless integration with event-driven architectures (EDAs).

November 05, 2024

Numecent announced they have expanded their Microsoft collaboration with the launch of Cloudpager's new integration to App attach in Azure Virtual Desktop.

November 04, 2024

Progress announced the completion of the acquisition of ShareFile, a business unit of Cloud Software Group, providing a SaaS-native, AI-powered, document-centric collaboration platform, focusing on industry segments including business and professional services, financial services, industrial and healthcare.

November 04, 2024

Incredibuild announced the acquisition of Garden, a provider of DevOps pipeline acceleration solutions.

October 31, 2024

The Open Source Security Foundation (OpenSSF) announced an expansion of its free course “Developing Secure Software” (LFD121).

October 31, 2024

Redgate announced that its core solutions are listed in Amazon Web Services (AWS) Marketplace.

October 30, 2024

LambdaTest introduced a suite of new features to its AI-powered Test Manager, designed to simplify and enhance the test management experience for software development and QA teams.