{"id":2227,"date":"2025-07-10T17:42:20","date_gmt":"2025-07-10T17:42:20","guid":{"rendered":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2025\/07\/10\/the-2025-docker-state-of-application-development-report\/"},"modified":"2025-07-10T17:42:20","modified_gmt":"2025-07-10T17:42:20","slug":"the-2025-docker-state-of-application-development-report","status":"publish","type":"post","link":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2025\/07\/10\/the-2025-docker-state-of-application-development-report\/","title":{"rendered":"The 2025 Docker State of Application Development Report"},"content":{"rendered":"<h2 class=\"wp-block-heading\">Executive summary<\/h2>\n<p>The <strong><em>2025 Docker State of Application Development Report<\/em><\/strong> offers an ultra high-resolution view of today\u2019s fast-evolving dev landscape. Drawing insights from over 4,500 developers, engineers, and tech leaders \u2014 three times more users than last year \u2014 the survey explores tools, workflows, pain points, and industry trends. In this our third report, key themes emerge: AI is gaining ground but adoption remains uneven; security is now a shared responsibility across teams; and developers still face friction in the inner loop despite better tools and culture. With a broader, more diverse respondent base than our previous more IT-focused surveys, this year\u2019s report delivers a richer, more nuanced view of how modern software is built and orgs operate.<\/p>\n<h2 class=\"wp-block-heading\">2025 report key findings<\/h2>\n\n<p><strong>IT is among the leaders in AI <\/strong>\u2014 with <strong>76% <\/strong>of<strong> <\/strong>IT\/SaaS pros using AI tools at work, compared with just <strong>22%<\/strong> across industries. Overall, there\u2019s a huge spread across industries \u2014 from 1% to 84%.\u00a0<\/p>\n<p><strong>Security is no longer a siloed specialty<\/strong> \u2014 especially when vulnerabilities strike. Just <strong>1 in 5 organizations outsource security<\/strong>, and it\u2019s top of mind at most others: only 1% of respondents say security is not a concern at their organization.<\/p>\n<p><strong>Container usage soared to 92% in the IT industry <\/strong>\u2014 up from 80% in our 2024 survey. But adoption is lower across other industries, at <strong>30%<\/strong>. IT\u2019s greater reliance on microservice-based architectures \u2014 and the modularity and scalability that containers provide \u2014 could explain the disparity.<\/p>\n<p><strong>Non-local dev environments are now the norm \u2014 not the exception<\/strong>. In a major shift from last year, <strong>64%<\/strong> of developers say they use <strong>non-local environments<\/strong> <strong>as their primary development setup<\/strong>, with local environments now accounting for only <strong>36%<\/strong> of dev workflows.\u00a0<\/p>\n<p><strong>Data quality is the bottleneck<\/strong> when it comes to building AI\/ML-powered apps \u2014 and it affects everything downstream. <strong>26% of AI builders<\/strong> say they\u2019re not confident in how to prep the right datasets \u2014 or don\u2019t trust the data they have.\u00a0<\/p>\n<h2 class=\"wp-block-heading\">Developer productivity, AI, and security are key themes<\/h2>\n<p>Like last year\u2019s survey, our 2025 report drills down into <strong>three main areas<\/strong>:<\/p>\n\n<p>What\u2019s helping devs thrive \u2014 and what\u2019s still holding them back?<\/p>\n<p>AI is changing software development \u2014 but not how you think<\/p>\n<p>Security \u2014 it\u2019s a team sport<\/p>\n<h2 class=\"wp-block-heading\">1. What\u2019s helping devs thrive \u2014 and what\u2019s still holding them back?<\/h2>\n\n<p>Great culture, better tools \u2014 but developers often still hit sticking points. From pull requests held up in review to tasks without clear estimates, the inner loop remains cluttered with surprisingly persistent friction points.<\/p>\n<h3 class=\"wp-block-heading\">How devs learn \u2014 and what\u2019s changing<\/h3>\n\n<p><strong>Self-guided learning is on the upswing<\/strong>. Across all industries, fully <strong>85%<\/strong> of respondents turn to online courses or certifications, far outpacing traditional sources like school (<strong>33%<\/strong>), books (<strong>25%<\/strong>), or on-the-job training (<strong>25%<\/strong>).\u00a0<\/p>\n\n<p>Among IT folks, the picture is more nuanced. <strong>School is still the top venue<\/strong> for learning to code (<strong>65%<\/strong>, up from 57% in our 2024 survey), but online resources are also trending upward. Some <strong>63%<\/strong> of IT pros learned coding skills via online resources (up from 54% in our 2024 survey) and <strong>57%<\/strong> favored online courses or certifications (up from 45% in 2024).<\/p>\n\n<div class=\"wp-block-ponyo-image\"><\/div>\n\n<h3 class=\"wp-block-heading\">How devs like to learn<\/h3>\n\n<p>As for how devs prefer to learn, <strong>reading documentation tops the list<\/strong>, as in last year\u2019s report \u2014 that despite the rise in new and interactive forms of learning. Some <strong>29%<\/strong> say they lean on documentation, edging out videos and side projects (<strong>28% each<\/strong>) and slightly ahead of structured online training (<strong>26%<\/strong>).\u00a0<\/p>\n\n<p>AI tools play a relatively minor role in how respondents learn, with GitHub Copilot cited by just <strong>13%<\/strong> overall \u2014 and only <strong>9%<\/strong> among IT pros. It\u2019s also cited by <strong>13%<\/strong> as a preferred learning method.<\/p>\n\n<h3 class=\"wp-block-heading\">Online resources<\/h3>\n\n<p>When <strong>learning to code via online resources<\/strong>, respondents overwhelmingly favored technical documentation (<strong>82%<\/strong>) ahead of written tutorials and how-to videos (<strong>66%<\/strong> each), and blogs (<strong>63%<\/strong>).<\/p>\n\n<p>Favorite <strong>online courses or certifications<\/strong> included Coursera (<strong>28%<\/strong>), LinkedIn Learning (<strong>24%<\/strong>), and Pluralsight (<strong>23%<\/strong>).<\/p>\n\n<h3 class=\"wp-block-heading\">Discovering new tools<\/h3>\n\n<p>When it comes to <strong>finding out about new tools<\/strong>, developers tend to trust the opinions and insights of other developers \u2014 as evidenced by the top four selected options. Across industries, the main ways are developer communities, social media, and blogs (tied at <strong>23%<\/strong>), followed closely by friends\/colleagues (<strong>22%<\/strong>).<\/p>\n<p>Within the IT industry only, the findings mirror last year\u2019s, though blogs have moved up from third place to first. The primary ways devs learn about new tools are blogs (<strong>54%<\/strong>), developer communities (<strong>52%<\/strong>), and social media (<strong>50%<\/strong>), followed by searching online (<strong>48%<\/strong>) and friends\/colleagues (<strong>46%<\/strong>).Conferences still play a significant role, with <strong>34%<\/strong> of IT folks selecting this response, versus <strong>17%<\/strong> across industries.<\/p>\n\n<h3 class=\"wp-block-heading\">Open source contributions<\/h3>\n\n<p>Unsurprisingly, IT industry workers are <strong>more active in the open source space<\/strong>:\u00a0<\/p>\n\n<p><strong>48%<\/strong> contributed to open source in the past year, while <strong>52%<\/strong> did not.\u00a0<\/p>\n<p>That\u2019s a slight drop from 2024, when 59% reported contributing and 41% had not.<\/p>\n<p>Falling open source contributions could be worth keeping an eye on \u2014 especially with growing developer reliance on AI coding copilots. Could AI be chipping away at the need for open source code itself? Future studies could reveal whether this is a blip or a trend.<\/p>\n\n<p>Across industries, just <strong>13%<\/strong> made open source contributions, while <strong>87% <\/strong>did not. But <strong>the <\/strong><strong><em>desire<\/em><\/strong><strong> to contribute is widespread<\/strong> \u2014 spanning industries as diverse as energy and utilities (<strong>91%<\/strong>), media or digital and education (<strong>90% <\/strong>each), and IT and engineering or manufacturing (<strong>82%<\/strong> each).<\/p>\n\n<p>Mirroring our 2024 study, the <strong>biggest barrier to contributing to open source is time<\/strong> \u2014 <strong>24%<\/strong>, compared with 40% in last year\u2019s IT-focused study. Other barriers include not knowing where to start (<strong>18%<\/strong>) and needing guidance from others on how to contribute (<strong>15%<\/strong>).<\/p>\n\n<p>Employers are often supportive: <strong>37%<\/strong> allow employees to contribute to open source, while just <strong>29%<\/strong> do not.<\/p>\n\n<h3 class=\"wp-block-heading\">Tech stack<\/h3>\n\n<p>This year, we dove deeper into\u00a0 the tech stack landscape to understand more about the application structures, languages, and frameworks devs are using \u2014 and how they have evolved since the previous survey.<\/p>\n\n<h4 class=\"wp-block-heading\">Application structure<\/h4>\n\n<p>Asked about the <strong>structure of the applications they work on<\/strong>, respondents\u2019 answers underscored the continued rise of microservices we saw in our 2024 report.<\/p>\n\n<p><strong>Thirty-five percent said they work on microservices-based applications <\/strong>\u2014 far more than those who work on monolithic or hybrid monolith\/microservices (<strong>24%<\/strong> each), but still behind the <strong>38%<\/strong> who work on client-server apps.<\/p>\n\n<h4 class=\"wp-block-heading\">Non-local dev environments are now the norm \u2014 not the exception<\/h4>\n\n<p>The tides have officially turned. In 2025, <strong>64%<\/strong> of developers say they use <strong>non-local environments<\/strong> as their primary development setup, up from just 36% last year. Local environments \u2014 laptops or desktops \u2014 now account for only <strong>36%<\/strong> of dev workflows.<\/p>\n\n<div class=\"wp-block-ponyo-image\"><\/div>\n\n<p>What\u2019s driving the shift? A mix of flexible, cloud-based tooling:<\/p>\n\n<p><strong>Ephemeral or preview environments<\/strong>: 10% (\u2193 from 12% in 2024)<\/p>\n<p><strong>Personal remote dev environments or clusters<\/strong>: 22% (\u2191 from 11%)<\/p>\n<p><strong>Other remote dev tools<\/strong> (e.g., Codespaces, Gitpod, JetBrains Space): 12% (\u2191 from 8%)<\/p>\n<p>Compared to 2024, adoption of persistent, personal cloud environments has doubled, while broader usage of remote dev tools is also on the rise.<\/p>\n\n<p><strong>Bottom line:<\/strong> As we\u2019ve tracked since our first app dev report in 2022, the future of software development is remote, flexible, and increasingly cloud-native.<\/p>\n\n<h4 class=\"wp-block-heading\">IDP adoption remains low \u2014 except at larger companies<\/h4>\n\n<p>Internal Developer Portals (IDPs) may be buzzy, but adoption is still in early days. Only <strong>7% of developers<\/strong> say their team currently uses an IDP, while <strong>93%<\/strong> do not.<br \/>That said, usage climbs with company size. Among orgs with <strong>5,000+ employees, IDP adoption jumps to 36%<\/strong>. IDPs aren\u2019t mainstream yet \u2014 but at scale, they\u2019re proving their value.<\/p>\n\n<h4 class=\"wp-block-heading\">OS preferences hold steady \u2014 with Linux still on top<\/h4>\n\n<p>When it comes to operating systems for app development, <strong>Linux continues to lead the pack<\/strong>, used by <strong>53%<\/strong> of developers \u2014 the same share as last year. <strong>macOS<\/strong> usage has ticked up slightly to <strong>51%<\/strong> (from 50%), while <strong>Windows<\/strong> trails just behind at <strong>47%<\/strong> (up from 46%).<\/p>\n\n<p>The gap among platforms remains narrow, suggesting that today\u2019s development workflows are increasingly OS-flexible \u2014 and often cross-platform.<\/p>\n\n<h4 class=\"wp-block-heading\">Python surges past JavaScript in language popularity<\/h4>\n\n<p>Python is now the top language among developers, used by <strong>64%<\/strong>, surpassing <strong>JavaScript<\/strong> at <strong>57%<\/strong> and <strong>Java<\/strong> at <strong>40%<\/strong>. That\u2019s a big jump from 2024, when JavaScript held the lead.<\/p>\n\n<p>Framework usage is more evenly spread: <strong>Spring Boot<\/strong> leads at <strong>19%<\/strong>, with <strong>Angular<\/strong>, <strong>Express.js<\/strong>, and <strong>Flask<\/strong> close behind at <strong>18%<\/strong> each.<\/p>\n\n<h4 class=\"wp-block-heading\">Data store preferences are shifting<\/h4>\n\n<p>In 2025, <strong>MongoDB<\/strong> leads the pack at <strong>21%<\/strong>, followed closely by <strong>MySQL\/MariaDB<\/strong> and <strong>Amazon RDS<\/strong> (both at <strong>20%<\/strong>). That\u2019s a notable shift from 2024, when <strong>PostgreSQL<\/strong> (<strong>45%<\/strong>) topped the list.<\/p>\n\n<h4 class=\"wp-block-heading\">Tool favorites hold<\/h4>\n\n<p><strong>GitHub<\/strong>, <strong>VS Code<\/strong>, and <strong>JetBrains editors<\/strong> remain top development tools, as they did in our previous survey. And there\u2019s little change across CI\/CD, provisioning, and monitoring tools:<\/p>\n\n<p><strong>CI\/CD<\/strong>: GitHub Actions (40%), GitLab (39%), Jenkins (36%)<\/p>\n<p><strong>Provisioning<\/strong>: Terraform (39%), Ansible (35%), GCP (32%)<\/p>\n<p><strong>Monitoring<\/strong>: Grafana (40%), Prometheus (38%), Elastic (34%)<\/p>\n<h3 class=\"wp-block-heading\">Containers: the great divide?<\/h3>\n\n<p>Among IT pros, <strong>container usage soared to 92%<\/strong> \u2014 up from 80% in our 2024 survey. Zoom out to a broader view across industries, however, and adoption appears considerably lower. Just <strong>30%<\/strong> of developers say they use containers in any part of their workflow.\u00a0<\/p>\n\n<p>Why the gap? Differences in app structure may offer an explanation: IT industry respondents work with microservice-based architectures more often than those in other industries (<strong>68%<\/strong> versus <strong>31%<\/strong>). So the higher container adoption may stem from IT pros\u2019 need for modularity and scalability \u2014 which containers provide in spades.<\/p>\n<p>And among container users, needs are evolving. They want better tools for <strong>time estimation (31% <\/strong>compared to 23% of all respondents<strong>), task planning (18% for both container users and all respondents), and monitoring\/logging (16%) <\/strong>vs designing from scratch (18%) in the number 3 spot for all respondents \u2014 stubborn pain points across the software lifecycle.<\/p>\n\n<h3 class=\"wp-block-heading\">An equal-opportunity headache: estimating time<\/h3>\n\n<p>No matter the role, <strong>estimating how long a task will take is the most consistent pain point<\/strong> across the board. Whether you\u2019re a front-end developer (<strong>28%<\/strong>), data scientist (<strong>31%<\/strong>), or a software decision-maker (<strong>49%<\/strong>), precision in time planning remains elusive.<\/p>\n<p>Other top roadblocks? <strong>Task planning (26%)<\/strong> and <strong>pull-request review (25%)<\/strong> are slowing teams down. Interestingly, where people say they need better tools doesn\u2019t always match where they\u2019re getting stuck. Case in point, <strong>testing solutions and Continuous Delivery (CD)<\/strong> come up often when devs talk about tooling gaps \u2014 even though they\u2019re not always flagged as blockers.<\/p>\n\n<h3 class=\"wp-block-heading\">Productivity by role: different hats, same struggles<\/h3>\n\n<p>When you break it down by role, some unique themes emerge:<\/p>\n\n<p><strong>Experienced developers<\/strong> struggle most with time estimation (<strong>42%<\/strong>).<\/p>\n<p><strong>Engineering managers<\/strong> face a three-way tie: <strong>planning, time estimation, and designing from scratch (28% each)<\/strong>.<\/p>\n<p><strong>Data scientists<\/strong> are especially challenged by <strong>CD (21%)<\/strong> \u2014 a task not traditionally in their wheelhouse.<\/p>\n<p><strong>Front-end devs<\/strong>, surprisingly, list <strong>writing code (28%)<\/strong> as a challenge, closely followed by <strong>CI (26%)<\/strong>.<\/p>\n<p>Across roles, a common thread stands out: even seasoned professionals are grappling with foundational coordination tasks \u2014 not the \u201chard\u201d tech itself, but the orchestration around it.<\/p>\n\n<h3 class=\"wp-block-heading\">Tools vs. culture: two sides of the experience equation<\/h3>\n\n<p>On the tooling side, the biggest callouts for improvement across industries include:<\/p>\n\n<p><strong>Time estimation (23%)<\/strong><\/p>\n<p><strong>Task planning (18%)<\/strong><\/p>\n<p><strong>Designing solutions from scratch (18%)<\/strong><\/p>\n<p>Within the IT industry specifically, the top priority is the same \u2014 but even more prevalent:<\/p>\n\n<p><strong>Time estimation (31%)<\/strong><\/p>\n<p><strong>Task planning (18%)<\/strong><\/p>\n<p><strong>PR review (18%)<\/strong><\/p>\n<p>But productivity isn\u2019t just about tools \u2014 it\u2019s deeply cultural. When asked what\u2019s working well, developers pointed to <strong>work-life balance (39%), location flexibility such as work from home policies (38%)<\/strong>, and <strong>flexible hours (37%) <\/strong>as top cultural strengths.<\/p>\n<p>The weak spots? <strong>Career development (38%), recognition (36%)<\/strong>, and <strong>meaningful work (33%)<\/strong>. In other words: developers like where, when, and how they work, but not always why.<\/p>\n\n<h3 class=\"wp-block-heading\">What\u2019s easy? What\u2019s not?<\/h3>\n\n<p>While the dev world is full of moving parts, a few areas are surprisingly <em>not<\/em> challenging:<\/p>\n\n<p><strong>Editing config files (8%)<\/strong><\/p>\n<p><strong>Debugging in dev (8%)<\/strong><\/p>\n<p><strong>Writing config files (7%)<\/strong><\/p>\n<p>Contrast that with the most taxing areas:<\/p>\n\n<p><strong>Troubleshooting in production (9%)<\/strong><\/p>\n<p><strong>Debugging in production (9%)<\/strong><\/p>\n<p><strong>Security-related tasks (8%)<\/strong><\/p>\n<p>It\u2019s a reminder that production is still where the stress \u2014 and the stakes \u2014 are highest.<\/p>\n\n<h2 class=\"wp-block-heading\">2. AI is changing software development \u2014 but not how you think<\/h2>\n\n<p>Rumors of AI\u2019s pervasiveness in software development have been greatly exaggerated. A look under the hood shows <strong>adoption is far from uniform<\/strong>.\u00a0<\/p>\n<h3 class=\"wp-block-heading\">AI in dev workflows: two very different camps<\/h3>\n\n<p>One of the clearest splits we saw in the data is how people use AI at work. There are two groups:<\/p>\n\n<p><strong>Developers using AI tools <\/strong>like ChatGPT, Copilot, and Gemini to help with everyday tasks \u2014 writing, documentation, and research.<\/p>\n<p><strong>Teams<\/strong> <strong>building AI\/ML applications<\/strong> from the ground up.<\/p>\n<h3 class=\"wp-block-heading\">IT is among the leaders in AI\u00a0<\/h3>\n\n<p>Overall, only <strong>22%<\/strong> of respondents said they use AI tools at work. But that number masks a <strong>huge spread across industries \u2014 from 1% to 84%<\/strong>. IT\/SaaS folks sit near the top of the range at <strong>76%<\/strong>.\u00a0<\/p>\n<div class=\"wp-block-ponyo-image\"><\/div>\n<p>IT\u2019s leadership in AI is even more marked when you look at how many are building AI\/ML into apps:\u00a0<\/p>\n\n<p><strong>34% of IT\/SaaS respondents<\/strong> say they do.<\/p>\n<p><strong>Only 8% of non-tech industries<\/strong> can say the same.<\/p>\n<p><strong>And the strategy gap is just as big<\/strong>. While <strong>73%<\/strong> of tech companies say they have a clear AI strategy, only <strong>16%<\/strong> of non-tech companies do. Translation: AI is gaining traction, but it\u2019s still living mostly inside tech bubbles.<\/p>\n\n<h3 class=\"wp-block-heading\">AI tools: overhyped and indispensable<\/h3>\n\n<p>Here\u2019s the paradox: while <strong>59%<\/strong> of respondents say AI tools are overhyped, <strong>64%<\/strong> say they make their work easier.<\/p>\n\n<p>Even more telling, <strong>65% of users say they\u2019re using AI more now than they did a year ago<\/strong> \u2014 and that they use it daily.<\/p>\n\n<p>The hype is real. But for many devs, the utility is even more real.<\/p>\n\n<p>These numbers track with our 2024 findings, too \u2014 where nearly two-thirds of devs said AI made their job easier, even as 45% weren\u2019t fully sold on the buzz.<\/p>\n\n<h3 class=\"wp-block-heading\">AI tool usage is up \u2014 and ChatGPT leads the pack<\/h3>\n\n<p>No big surprise here. <strong>ChatGPT is still the most-used AI tool by far<\/strong>. But the gap is growing.<\/p>\n<p>Compared to last year\u2019s survey:<\/p>\n\n<p><strong>ChatGPT<\/strong> usage jumped from 46% \u2192 82%<\/p>\n<p><strong>GitHub Copilot<\/strong>: 30% \u2192 57%<\/p>\n<p><strong>Google Gemini<\/strong>: 19% \u2192 22%<\/p>\n<p>Expect that trend to continue as more teams test drive (and trust) these tools in production workflows, moving from experimentation to greater integration.<\/p>\n\n<h3 class=\"wp-block-heading\">Not all devs use AI the same way<\/h3>\n\n<p>While coding is the top AI use case overall, how devs actually lean on it varies by role:<\/p>\n\n<p><strong>Seasoned devs<\/strong> use AI for documentation and writing tests \u2014 but only lightly.<\/p>\n<p><strong>DevOps engineers<\/strong> use it to write docs and navigate CLI tools.<\/p>\n<p><strong>Software developers<\/strong> often turn to it for research and test automation.<\/p>\n<p>And how <em>dependent<\/em> they feel on AI also shifts:<\/p>\n\n<p><strong>Seasoned devs<\/strong>: Often rate their dependence as 0\/10.<\/p>\n<p><strong>DevOps engineers<\/strong>: Closer to 7\/10.<\/p>\n<p><strong>Software devs<\/strong>: Usually around 5\/10.<\/p>\n<p>For comparison, the overall average dependence on AI in our 2024 survey was 4\/10 (all users). Looking ahead, it will be interesting to see how dependence on AI shifts and becomes further integrated by role.\u00a0<\/p>\n\n<h3 class=\"wp-block-heading\">The hidden bottleneck: data prep<\/h3>\n\n<p>When it comes to building AI\/ML-powered apps, <strong>data is the choke point<\/strong>. A full <strong>26% of AI builders<\/strong> say they\u2019re not confident in how to prep the right datasets \u2014 or don\u2019t trust the data they have.<\/p>\n\n<p>This issue lives upstream but affects everything downstream \u2014 time to delivery, model performance, user experience. And it\u2019s often overlooked.<\/p>\n\n<h3 class=\"wp-block-heading\">Feelings around AI<\/h3>\n\n<p>How do people really feel about AI tools? Mostly positive \u2014 but it\u2019s a mixed bag.<\/p>\n\n<p>Compared to last year\u2019s survey:<\/p>\n\n<p>AI tools are a positive option: 65% \u2192 66%<\/p>\n<p>They allow me to focus on more important tasks: 55% \u2192 63%<\/p>\n<p>They make my job more difficult: 19% \u2192 40%<\/p>\n<p>They are a threat to my job: 23% \u2192 44%<\/p>\n<p>The predominant emotions around building AI\/ML apps are distinctly positive \u2014 enthusiasm, curiosity, and happiness or interest.<\/p>\n\n<h2 class=\"wp-block-heading\">3. Security \u2014 it\u2019s a team sport<\/h2>\n\n<h3 class=\"wp-block-heading\">Why everyone owns security now<\/h3>\n<p>In the evolving world of software development, one thing is clear \u2014 <strong>security is no longer a siloed specialty<\/strong>. It\u2019s a team sport, especially when vulnerabilities strike. Forget the myth that only \u201csecurity people\u201d handle security. Across orgs big and small, roles are blending. If you\u2019re writing code, you\u2019re in the security game. As one respondent put it, \u201cWe don\u2019t have dedicated teams \u2014 we all do it.\u201d\u00a0<\/p>\n\n<p>Just <strong>1 in 5 organizations outsource security<\/strong>.<\/p>\n<p>Security is top of mind at most others: only <strong>1% of respondents say security is not a concern<\/strong> at their organization.<\/p>\n<p><strong>One exception to this trend<\/strong>: In larger IT organizations (50+ employees), software security is more likely to be the exclusive domain of security engineers, with other types of engineers playing less of a role.<\/p>\n\n<h3 class=\"wp-block-heading\">Devs, leads, and ops all claim the security mantle<\/h3>\n\n<p>It\u2019s not just security engineers who are on alert. <strong>Team leads, DevOps pros, and senior developers<\/strong> all see themselves as responsible for security. And they\u2019re all right. Security has become woven into every function.<\/p>\n\n<h3 class=\"wp-block-heading\">When vulnerabilities hit, it\u2019s all hands on deck<\/h3>\n\n<p>No turf wars here. When scan alerts go off, <strong>everyone pitches in<\/strong> \u2014 whether it\u2019s security engineers helping experienced devs to decode scan results, engineering managers overseeing the incident, or DevOps engineers filling in where needed.<\/p>\n\n<p>As in our 2024 survey, <strong>fixing vulnerabilities <\/strong>is the<strong> most common security task<\/strong> (<strong>30%<\/strong>) \u2014 followed by logging data analysis, running security scans, monitoring security incidents, and dealing with scan results (all tied at <strong>24%<\/strong> each).<\/p>\n\n<p>Fixing vulnerabilities is also a major time suck. Last year, respondents pointed to <strong>better vulnerability remediation tools<\/strong> as a key gap in the developer experience.<\/p>\n\n<h3 class=\"wp-block-heading\">Security tools<\/h3>\n\n<p>For the second year in a row, <strong>SonarQube<\/strong> is the most widely used security tool, cited by 11% of respondents. But that\u2019s a noticeable drop from last year\u2019s 24%, likely due to the 2024 survey\u2019s heavier focus on IT professionals.<\/p>\n\n<p><strong>Dependabot<\/strong> follows at 8%, with <strong>Snyk<\/strong> and <strong>AWS Security Hub<\/strong> close behind at 7% each \u2014 all showing lower adoption compared to last year\u2019s more tech-centric sample.<\/p>\n\n<h3 class=\"wp-block-heading\">Security isn\u2019t the bottleneck \u2014 planning and execution are<\/h3>\n\n<p>Surprisingly, security doesn\u2019t crack the top 10 issues holding teams back. <strong>Planning and execution-type activities are bigger sticking points<\/strong>.<\/p>\n\n<p>Overall, across all industries and development-focused roles, <strong>security issues are the 11th and 14th most selected<\/strong>, way behind planning and execution type activities.<\/p>\n\n<p>Translation? Security is better integrated into the workflow than ever before.\u00a0<\/p>\n\n<h3 class=\"wp-block-heading\">Shift-left is yesterday\u2019s news<\/h3>\n\n<p>The once-pervasive mantra of \u201cshift security left\u201d is now only the <strong>ninth most important trend (14%) <\/strong>\u2014 behind Generative AI (<strong>27%<\/strong>), AI assistants for software engineering (<strong>23%<\/strong>), and Infrastructure as Code (<strong>19%<\/strong>). Has the shift left already happened? Is AI and cloud complexity drowning it out? Or is this further evidence that security is, by necessity, shifting <em>everywhere<\/em>?<\/p>\n\n<p>Our 2024 survey identified the shift-left approach as a possible source of frustration for developers and an area where more effective tools could make a difference. Perhaps security tools have gotten better, making it easier to shift left. Or perhaps there\u2019s simply broader acceptance of the shift-left trend.<\/p>\n\n<h3 class=\"wp-block-heading\">Shift-left may not be buzzy \u2014 but it still matters<\/h3>\n\n<p>It\u2019s no longer a headline-grabber, but <strong>security-minded dev leads still value the shift-left mindset<\/strong>. They\u2019re the ones embedding security into design, coding, CI\/CD, and deployment.<\/p>\n\n<p>Even if the buzz has faded, the impact hasn\u2019t.<\/p>\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n<p>The <strong><em>2025 Docker State of Application Development Report<\/em><\/strong> captures a fast-changing software landscape defined by AI adoption, evolving security roles, and persistent friction in developer workflows. While AI continues to gain ground, adoption remains uneven across industries. Security has become a shared responsibility, and the shift to non-local dev environments signals a more cloud-native future. Through it all, developers are learning, building, and adapting quickly.<\/p>\n<p>In spotlighting these trends, the report doesn\u2019t just document the now \u2014 it charts a path forward. Docker will continue evolving to meet the needs of modern teams, helping developers navigate change, streamline workflows, and build what\u2019s next.<\/p>\n\n<h2 class=\"wp-block-heading\">Methodology<\/h2>\n\n<p>The<strong><em> 2025 Docker State of Application Development Report<\/em><\/strong> was an online, 25-minute survey conducted by Docker\u2019s User Research Team in the fall of 2024. The distribution was much wider than in previous years due to advertising the survey on a larger range of platforms.<\/p>\n\n<h3 class=\"wp-block-heading\">Credits<\/h3>\n<p>This research was designed, conducted, and analyzed by the Docker UX Research Team: Rebecca Floyd, Ph.D.; Julia Wilson, Ph.D.; and Olga Diachkova.\u00a0\u00a0<\/p>","protected":false},"excerpt":{"rendered":"<p>Executive summary The 2025 Docker State of Application Development Report offers an ultra high-resolution view of today\u2019s fast-evolving dev landscape. [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[4],"tags":[],"class_list":["post-2227","post","type-post","status-publish","format-standard","hentry","category-docker"],"_links":{"self":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts\/2227","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/comments?post=2227"}],"version-history":[{"count":0,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts\/2227\/revisions"}],"wp:attachment":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/media?parent=2227"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/categories?post=2227"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/tags?post=2227"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}