10 Software Security Practices Built for the Next 250 Years
Dark Reading, Monday, October 26th, 2026
Veracode's Chris Wysopal lists 10 lasting software security practices, from secure-by-design architecture to human accountability for AI code.
In a Dark Reading opinion piece tied to Cybersecurity Awareness Month, Veracode founder Chris Wysopal sets out 10 practices meant to keep software trustworthy as technology changes.
They include building security into architecture, keeping an accurate inventory of applications and dependencies, verifying all code including AI-generated code, and making the secure path the easiest for developers.
He cites Veracode research finding 44 percent of AI-generated coding tasks introduced a known vulnerability and security debt affecting 82 percent of organizations.
Other practices cover supply chain controls, measuring risk removed rather than activity, threat-modeling whole AI agent systems, and keeping human owners accountable.