The world is changing fast. Organizations are moving to the cloud, building cloud-native applications that heavily leverage open-source software, and adopting new practices such as Agile and DevOps to deliver applications more rapidly. As a result, some of the traditional approaches to vulnerability assessment are no longer working as well as security practitioners would like. For example, with continuous integration and continuous deployment (CI/CD), the software changes frequently and automatically, and there’s often not enough time to perform traditional software vulnerability tests. When we recently surveyed 700 CISOs around the world, 63% told us their accelerated pace of software production and delivery have made it more difficult to detect and manage software vulnerabilities.