Inefficient SAST tuning & false positives Lack of coordination between infosec team and developers Continuous deployment chaos Manual pen-testing becomes a bottleneck Poor visibility of security track record Lack of cloud support Systems that are not scalable