# ActiveState study finds AI code generation outpaces security reviews

> Survey of 172 security practitioners shows 58% ship code faster than security can review, while AI tools add unvetted dependencies.

Oossa · 2026-11-09 · https://oossa.com/en/activestate-study-finds-ai-code-generation-outpaces-security-reviews

ActiveState released a Linux Foundation study on AI’s impact on software security. It surveyed 172 security practitioners and found that 58% of teams ship code faster than security reviews can keep up. AI coding assistants increase external package use by 60%, but teams only check transitive dependencies about half the time. Respondents said AI tools caught 30% of the vulnerabilities they found and made security work 17% faster, though false positives raised workloads by 30%. The study urges dedicated AI security roles and policies that require human review of AI‑generated code.

## The facts

- 58% of teams ship code faster than security reviews can keep up
- 60% say AI assistants increased external packages in their codebases

## Why it matters

Security teams may miss half of the new dependencies AI adds, increasing the risk of supply‑chain attacks.

## Sources & references

1. [AI Is Writing Code Faster Than Security Can Review It, Finds New Linux Foundation Research Sponsored by ActiveState](https://www.prnewswire.com/news-releases/ai-is-writing-code-faster-than-security-can-review-it-finds-new-linux-foundation-research-sponsored-by-activestate-302931650.html) – PR Newswire RSS, 2026-11-09

Last updated: 2026-11-09