1. Address Technical Security Debt, DevSec Metrics, Threat Modeling, Security Tool Training

2. IDE Security Plug-Ins

3. SAST/DAST/IAST, SCA

4. Chaos Monkey, Input Fuzzing, Integration Test

5. Software Signing

6. Signature Verify, Integrity Checks, Defense-in-Depth Measures

7. RASP, UEBA/ Network Monitoring, Penetration Test

8. Security Orchestration, RASP/WAF Shielding, Obfuscation

9. Dev Consumable, Correlated Vulnerability Analysis, IoC/TI STIX TAXII

10. Security Technical Debt, Modify Incident Response, Modify DND

Plan

Adapt

Prevent

Predict

Preprod

Verify

Source: Gartner 768889_C

1. Address Technical Security Debt, DevSec Metrics, Threat Modeling, Security Tool Training

2. IDE Security Plug-Ins

3. SAST/DAST/IAST, SCA

4. Chaos Monkey, Input Fuzzing, Integration Test

5. Software Signing

6. Signature Verify, Integrity Checks, Defense-in-Depth Measures

7. RASP, UEBA/ Network Monitoring, Penetration Test

8. Security Orchestration, RASP/WAF Shielding, Obfuscation

9. Dev Consumable, Correlated Vulnerability Analysis, IoC/TI STIX TAXII

10. Security Technical Debt, Modify Incident Response, Modify DND

Plan

Adapt

Prevent

Predict

Preprod

Verify

Source: Gartner 768889_C