Gartner Hype Cycle for Application Security, 2025

NetSPI’s Insights from the Report

• Gartner reiterates the importance of securing GenAI-enabled applications through AI security testing to help cybersecurity leaders identify exposures in AI-enabled applications.  
• Through 2029, over 50% of successful cybersecurity attacks against AI agents will exploit access control issues, using direct or indirect prompt injection as an attack vector.  
• Penetration Testing as a Service (PTaaS) enables organizations to elevate their security posture with continuous assessments that integrate validation earlier in the software development life cycle as compared with traditional pentesting efforts and gives access to real-time findings delivered through a platform, which accelerates remediation and improves collaboration efforts.  

Key Takeaways for Cybersecurity Leaders

• Rationalize your tools: Streamline and integrate to reduce complexity.  
• Leverage GenAI: Use AI to boost DevSecOps and speed up vulnerability fixes.  
• Adopt innovations wisely: Choose new tech that fits your organization’s maturity and goals.