Original Post: New insight into backlogs, developer engagement, and security posture
Semgrep has introduced enhanced reporting capabilities to provide AppSec teams with better insights into production backlogs, developer engagement, and overall security posture. Notable features include secure guardrails, which guide developers towards secure coding paths without halting progress. The new views allow teams to track the effectiveness of secure guardrails, the number of security findings presented to developers, and the proportion of these findings fixed before reaching production.
Other important additions include detailed charts on the production backlog, activity within the backlog, and the distribution of findings across projects. Teams can now identify “hot spot” projects with the most open findings and inspect metrics like the median open age of findings to monitor and improve security measures effectively.
These revamped reporting capabilities help AppSec teams understand the impact of their security initiatives and make it easier to demonstrate progress in “shift left” strategies, enhancing security throughout the development lifecycle.
Go here to read the Original Post