Critical Security Findings Nearly Quadrupled Year-Over-Year, OX Security's 2026 Application Security Benchmark Finds

Report identifies AI-assisted development as a key driver of accelerating application security risk

Mar. 17, 2026 at 12:05pm

Got story updates? Submit your updates here. ›

According to OX Security's 2026 Application Security Benchmark Report, critical application security findings rose nearly 4x year-over-year, based on analysis of more than 216 million security findings across 250 organizations. The report identifies AI-assisted development as a key driver of the growing volume of vulnerabilities entering software pipelines.

Why it matters

The report's findings highlight the significant increase in application security risks faced by organizations, driven by the rapid pace of AI-assisted software development. As development velocity accelerates, traditional security approaches are struggling to keep up, underscoring the need for more comprehensive and proactive security measures to protect against the growing threat landscape.

The details

The report found that the average organization now faces 865,398 security alerts, up 52% from 569,354 a year earlier. After prioritization, the average organization is left with 795 critical findings, up from 202 last year — nearly 4x higher. The critical issue ratio also rose from 0.035% to 0.092% of raw findings, indicating that meaningful risk is rising faster than total alert volume. The report also found that business context, such as high business priority and PII processing, drives risk more than technical severity, and that industry risk varies widely, with insurance organizations showing the highest proportion of critical findings.

  • The 2026 OX Application Security Benchmark Report is based on 216 million application security findings collected from 250 organizations over a 90-day period in Q4 2025.

The players

OX Security

A leader in application security, providing comprehensive coverage across the entire software development lifecycle — from AI code generation to cloud runtime.

Neatsun Ziv

The CEO of OX Security.

Got photos? Submit your photos here. ›

What they’re saying

“The data makes the trajectory impossible to ignore. We're not just seeing more alerts. We're seeing materially more real risk year-over-year. AI-assisted development is accelerating code output at a pace security teams were never built to handle, and the window to get ahead of that is narrowing.”

— Neatsun Ziv, CEO (PRNewswire)

The takeaway

The findings of the OX Security 2026 Application Security Benchmark Report underscore the urgent need for organizations to adopt more comprehensive and proactive security measures to keep pace with the rapidly evolving threat landscape driven by AI-assisted software development. As development velocity accelerates, traditional security approaches are proving increasingly insufficient, highlighting the importance of innovative solutions that can effectively detect, prioritize, and remediate vulnerabilities at scale.