Organisations often face challenges in balancing speed and security due to several factors. Traditional security testing methods can be time-consuming, leading to delays in agile development. The shortage of security expertise, difficulties in integrating security assessments into the development lifecycle, and the generation of false positives are common obstacles. Strategies like DevSecOps and advanced AST aim to address these challenges.