Contribute to CSA Research
Open Peer Reviews
Open Surveys
This survey, developed by the Cloud Security Alliance in conjunction with Google, examines how organizations are securing their code in an era of AI-assisted development and AI-driven attacks. Our objective is to gain better insight into:
- AI security and governance progress since our 2025 survey
- How organizations are adapting to faster vulnerability discovery and exploitation
- Detection, verification, and the effort spent on findings that require no action
- The level of autonomy organizations grant AI to remediate code
- Collaboration between security and development teams
Take the survey by November 20 →
The State of Third-Party Exposure
This survey examines how organizations assess and monitor their third parties
The State of Third-Party Exposure
This survey examines how organizations assess and monitor their third parties
- How third parties are assessed today, and what actually decides whether one is approved
- How organizations find out when a vendor changes, including when it adds AI
- Discovery of vendors that were never reviewed, or haven’t been reviewed recently
- What organizations can produce on demand when a third-party vendor is compromised
- Whether third-party incidents could have been prevented or have mitigated impact by the TPRM process