With the speed of innovation today, security is no longer an afterthought; it’s a fundamental requirement. This is especially true for B2B software developers, where security breaches can have significant financial and reputational consequences. To stay ahead of evolving threats, adopting a DevSecOps approach is crucial. DevPro Journal recently spoke with a few experts to learn more about the key trends shaping the DevSecOps landscape in 2025.
From “Shift-Left” to “Shift-Everywhere”
Dylan Thomas, Senior Director of Product and Engineering at OpenText Cybersecurity:
“In 2025, generative AI will transform DevSecOps from shift-left to shift-everywhere. This shift calls on organizations to apply the right tools at the right stages of the DevSecOps cycle, improving efficiency and effectiveness in security practices. Lightweight analysis in IDEs will help developers catch issues early, while automation integrated into pull requests and CI/CD pipelines will ensure a cohesive ‘integrate once’ approach for core functions such as SAST, SCA, and increasingly DAST, particularly for API security testing.
“Generative AI will be a transformative force in this evolution, accelerating DevSecOps automation and enhancing scalability. As generative AI drives faster software production, it will heighten the need for robust, mature DevSecOps environments that deliver on long-held principles like continuous security integration. Intelligent use of generative AI will also address persistent challenges, such as the scarcity of security experts, by automating the review and remediation of code vulnerabilities. Furthermore, as organizations embed generative AI into their software, they will face new security risks that demand innovative solutions. The convergence of the ‘shift everywhere’ philosophy with generative AI’s capabilities will redefine DevSecOps maturity, setting the stage for a more secure and scalable future.”
Logs Play Large Role in the Observability Industry
Joe Kim, CEO, Sumo Logic:
“As the digitization of businesses hit an all-time high in 2024, we anticipated an increase in need for Dev, Sec and Ops teams to collaborate much closer and work together to help answer the hardest questions facing the business, technology and security operations. This evolution has led to the rapid rise of AI-powered Observability platforms and a broader understanding of the criticality that logs play as the System of Record for technology.
“In 2025, the insight that resides in organizations’ structured and unstructured log data will be unlocked through the usage of traditional AI/ML and Generative AI technologies. This will provide unmatched levels of context and insights and ultimately deliver on the promise of Observability for applications and digital services. Toward the end of 2025, these similar capabilities will be repurposed to integrate Observability with Business Analytics to open up new methods to inform key business decisions in the form of ‘Customer Observability.’”
Seamlessly Embedded Security
Tal Levi-Joseph, VP, Software Engineering, OpenText:
“By 2025, AI and DevSecOps are set to transform how we approach software delivery, making it much faster, smarter, and more secure. Generative AI and large language models will become the backbone of automation, helping teams test more efficiently, deliver higher-quality products, and zero in on potential risks. These are the stepping stones for a broader future shift into autonomous delivery. DevSecOps will take center stage, embedding security seamlessly into every step of development, from initial design to delivery. At the same time, companies will prioritize working closely with their customers, using real-time feedback to create solutions that truly deliver value. Open, integrable platforms will be key to this transformation, giving organizations the flexibility to grow and adapt as the tech landscape evolves. It’s an exciting time when innovation and practicality are coming together to push boundaries.”
