Black Duck
blackduck.com › resources › analyst-reports › bsimm.html
BSIMM16 Software Security Assessment Report | Black Duck
February 13, 2026 - The BSIMM16 report, published in January 2026, represents the latest evolution of this detailed measuring stick for software security.
Polaris
Automated application security testing platform with SAST, DAST, and SCA. Scale AppSec across your SDLC with Black Duck Polaris. Get pricing & demo.
Static Analysis (SAST)
Black Duck SAST tools help developers find and fix security vulnerabilities in real-time. Integrate static analysis into your IDE, CI/CD pipelines, and code repos. Trusted by Fortune 100 companies.
Coverity Static
Coverity delivers accurate, scalable static analysis (SAST) for enterprise code databases. Get a deep, accurate analysis of complex codebases, and detect critical vulnerabilities and compliance risks in languages like C, C++, Java, and C#—integrated seamlessly into DevSecOps pipelines.
Black Duck SCA
Black Duck SCA detects vulnerabilities, manages open source licenses, and generates SBOMs at enterprise scale — protecting your software supply chain and ensuring regulatory compliance.
Black Duck Newsroom
news.blackduck.com › 2026-02-04-Black-Duck-Releases-BSIMM16-Revealing-AI-and-Regulatory-Compliance-Reshaping-Application-Security-Processes
Black Duck Releases BSIMM16 Revealing AI and Regulatory Compliance Reshaping Application Security Processes - Feb 4, 2026
February 4, 2026 - BSIMM16 highlights three major shifts: a 10% rise in teams using attack intelligence to track emerging AI vulnerabilities; a 12% increase in using risk-ranking methods to determine where LLM-generated code is safe to deploy; and a 10% uptick in applying custom rules to automated code review tools to catch issues unique to AI-generated code.
Black Duck
blackduck.com › content › dam › black-duck › en-us › reports › bsimm-report.pdf pdf
BSIMM16 REPORT 2026
DATA: BSIMM16 .....................................................................
Black Duck
blackduck.com › blog › bsimm16-benchmark-enterprise-programs.html
BSIMM16 Software Security Assessment Report: Benchmark Your Enterprise Security Program in 2026 | Black Duck Blog
February 4, 2026 - The BSIMM16 report reflects the observed practices of more than 100 organizations across industries, providing a clear view into how software security programs are evolving in response to modern development realities.
PR Newswire
prnewswire.com › news-releases › black-duck-releases-bsimm16-revealing-ai-and-regulatory-compliance-reshaping-application-security-processes-302676652.html
Black Duck Releases BSIMM16 Revealing AI and Regulatory Compliance Reshaping Application Security Processes
February 4, 2026 - /PRNewswire/ -- Black Duck®, the leader in AI-powered application security, today announced the release of BSIMM16, the 16th edition of the Building Security...
Yahoo! Finance
finance.yahoo.com › news › black-duck-releases-bsimm16-revealing-130000142.html
Black Duck Releases BSIMM16 Revealing AI and Regulatory Compliance Reshaping Application Security Processes
February 4, 2026 - 4, 2026 /PRNewswire/ -- Black Duck®, the leader in AI-powered application security, today announced the release of BSIMM16, the 16th edition of the Building Security In Maturity Model (BSIMM), revealing how organizations worldwide are transforming ...
ReversingLabs
reversinglabs.com › blog › bsimm16-ai-redefines-appsec
BSIMM16 confirms it: AI redefines the AppSec landscape | ReversingLabs
March 3, 2026 - The BSIMM16 report portrays organizations in 2026 as needing to secure their AI coding while defending against AI-enabled attacks.
Black Duck
blackduck.com › blog › ai-application-security-bsimm16-insights.html
AI Application Security: How BSIMM16 Shows Organizations Must Adapt | Black Duck Blog
March 17, 2026 - The BSIMM16 report provides the clearest industrywide snapshot yet of how AI is reshaping software security—across development, testing, compliance, governance, and even organizational culture. The data-driven Building Security in Maturity Model ...
Security Boulevard
securityboulevard.com › home › security bloggers network › the bsimm16 report: what today’s software security programs are really doing—and why it matters
The BSIMM16 report: What today’s software security programs are really doing—and why it matters - Security Boulevard
February 4, 2026 - The BSIMM16 report reflects the observed practices of more than 100 organizations across industries, providing a clear view into how software security programs are evolving in response to modern development realities.
Katilyst
katilyst.com › post › bsimm16-security-champions-blog
Adding Security Champions to Divide Responsibilities Multiplies Collaboration and Subtracts Friction
March 12, 2026 - BSIMM16, the latest edition of the highly-regarded annual report on the state of application security.
Seezo
seezo.io › blog › the-evolution-of-security-design-review
Seezo Blog: The Evolution of Security Design Review
February 24, 2026 - BSIMM16, released in January 2026 and based on observations across 111 organizations, reports that security feature review is now observed in 80.2% of participating firms, making it one of the most widely implemented security activities.
Sf2framework
sf2framework.com › 07-relationships › bsimm
BSIMM - Software Factory Security Framework (SF²)
BSIMM describes 128 security activities that organizations perform, organized into 12 practices across 4 domains (as of BSIMM16, 2026).
Scribd
scribd.com › document › 847709659 › Bsimm-15-Report
BSIMM15 Report Overview 2025 | PDF | Software Testing | Computer Security
The BSIMM15 report provides insights into the evolution and current state of software security initiatives (SSIs) across 121 organizations, highlighting key activities and trends in software security ...
Codific
codific.com › home › appsec › bsimm (building security in maturity model): a complete guide
BSIMM (Building Security In Maturity Model): A Complete Guide - Codific
September 2, 2025 - Discover everything about BSIMM, its origins, advantages, and alternatives like OWASP SAMM and NIST SSDF to enhance your software security!
Digital IT News
digitalitnews.com › home › ai › category: "news"
AI IT News
Black Duck announced the release of BSIMM16, the 16th edition of the Building Security In Maturity Model, highlighting how organizations…
Black Duck
blackduck.com › services › security-program › bsimm-maturity-model.html
BSIMM Assessment Services: Software Security Benchmarking | Black Duck
April 1, 2026 - Benchmark your AppSec program with BSIMM assessment services from Black Duck. Get data-driven insights from 100+ organizations, identify security gaps, and build a customized Maturity Action Plan (MAP) to advance your software security posture. Trusted by industry leaders worldwide.