博客

入选 2026 年 Gartner® 安全软件工程技术成熟度曲线™ (Hype Cycle™)

June 9, 2026
Secure Code Warrior
Analyst Recognition, June 2026

在同一报告中入选两个类别

Secure Code Warrior 荣获 两个类别 的认可——智能体编码安全与安全编码培训。我们认为，这两者共同讲述了一个核心事实：随着 AI 智能体接管更多开发
流程，开发人员所需的技能以及企业要求的治理水平变得前所未有的重要。而 SCW 两者兼备。
‍

Agentic coding security

Benefit rating
High
Maturity
Emerging
Mainstream
2–5 yrs

Secure code training

Benefit rating
High
Maturity
Early mainstream
Mainstream
<2 yrs


为何这对我们至关重要

  • Agentic development is reshaping enterprise security
    AI coding agents are generating and deploying code at speeds that overwhelm traditional application security practices. We feel Gartner identifies this as a transformational shift — not a future risk, but a present one.
  • Governance is the missing layer Organizations can adopt AI development tools or govern them — but most can't do both. SCW bridges that gap: enabling AI-driven development while maintaining visibility, guardrails, and accountability.
  • AI is making developer security skills more critical, not less
    In the 2026 Gartner Software Engineering Survey, 68% of software engineering leaders stated that application security is highly important to deliver software that meets current goals and requirements. Secure coding skills are often missing from general software engineering education, and what is considered secure code is a moving target. In our view that's why SCW is also named in the Secure Coding Training category: developer capability isn't optional, it's the foundation everything else is built on.
  • You need a vendor built for this moment — not retrofitted for it
    SCW was purpose-built for AI-driven development. Not bolted together from legacy tools. Your teams get training, governance, and traceability that moves at the speed of AI — from a vendor analysts say belongs in this space.

‍

Gartner 观点

Agentic Coding Security

"Agentic coding is fundamentally reshaping enterprise software development by accelerating software creation and delivery, and enabling innovation, even as it introduces substantial cybersecurity risks."

Hype Cycle for Secure Software Engineering, 2026
Secure Coding Training

"AI coding tools like Anthropic Claude and GitHub Copilot are making secure coding skills more important than ever to ensure the security of AI-generated code."

Hype Cycle for Secure Software Engineering, 2026

‍

SCW 如何应对挑战

AI visibility & risk correlation

Observe

Know which AI wrote what, where, and for whom. Commit-level traceability for compliance and incident response — without burning millions of tokens.

Guardrails on AI in your codebase

Govern

Put guardrails on what AI agents can and can't touch in your repositories. Govern AI-assisted development, including MCP connectivity, without blocking the productivity gains that drove adoption.

Developer capability at every stage

Learn

Train developers as the tooling evolves — from reviewing AI-generated code today, to governing fully agentic systems tomorrow. Skills that grow with the transition.

‍

开发转型——您目前处于什么阶段？

SCW Learning

SCW Learning

Enable developers with targeted security upskilling tailored for their role in AI-assisted workflows — at every stage of the transition.

SCW Trust Agent

SCW Trust Agent

Ensure every code change and commit is governed by policy — with full visibility and accountability into what AI did, where, and for whom.

‍

准备好治理 AI 驱动的开发了吗？

了解 Secure Code Warrior 如何为您的工程团队提供可见性、护栏和能力，从而在转型的每个阶段安全地采用 AI 开发。
‍
联系我们 → securecodewarrior.com

‍Gartner，《安全软件工程技术成熟度曲线》，Aaron Harrison，2026 年 6 月。Gartner 不对其研究出版物中描述的任何供应商、产品或服务进行背书，也不建议技术用户仅选择那些获得最高评分或其他称号的供应商。Gartner 研究出版物包含 Gartner 研究与咨询机构的意见，不应被视为事实陈述。Gartner 对本研究不承担任何明示或暗示的保证，包括任何适销性或特定用途适用性的保证。GARTNER 是 Gartner, Inc. 和/或其附属公司在美国及国际上的注册商标和服务标志。

分享到社交媒体
标语

在 AI 驱动的开发成果发布前实现有效治理

评估 AI 辅助风险，在提交代码时强制执行安全编码策略，并加速整个软件开发生命周期的安全交付。

预约演示
资源库

探索更多博客

获取有关安全编码、人工智能治理和软件风险管理的专家内容。

浏览全部
案例研究
筛选标签
这是 div 块中的一段文本。

Supercharged Security Awareness: How Tournaments are Inspiring Developers at Erste Group

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

了解更多
案例研究
筛选标签
这是 div 块中的一段文本。

Security as culture: How Blue Prism cultivates world-class secure developers

Learn how Blue Prism, the global leader in intelligent automation for the enterprise, used Secure Code Warrior's agile learning platform to create a security-first culture with their developers, achieve their business goals, and ship secure code at speed

了解更多
案例研究
筛选标签
这是 div 块中的一段文本。

统一的安全文化：Sage 如何打造其安全倡导者项目

了解 Sage 如何通过灵活且以关系为导向的方法提升安全性，成功培养了 200 多名安全倡导者，并实现了显著的风险降低。

了解更多
博客
筛选标签
这是 div 块中的一段文本。

2026年网络安全意识月：理解人工智能安全对企业防御至关重要

目前，大多数顶级人工智能公司已公开呼吁全球放缓人工智能的发展速度，以便安全防护措施能够跟上步伐。然而事实是，严重的安全问题已经显现。随着人工智能实施带来的经济成本和风险不断累积，无数安全领导者和高管团队正处于紧迫的境地。

了解更多
博客
筛选标签
这是 div 块中的一段文本。

赋能要素 8：打造项目品牌

成功的安全编码项目不仅需要优质的内容。赋能要素 8 展示了如何通过品牌化将参与过程转变为一种令人向往、以地位为驱动的体验。

了解更多
博客
筛选标签
这是 div 块中的一段文本。

每一位员工现在都处于 AI 网络安全的最前线

企业技术格局正以一种鲜有人预料到的速度发生剧变，直到为时已晚。我们已正式跨越了从人工编写代码和基础辅助编程，进入“智能体开发生命周期”（ADLC）的时代。虽然自主 AI 智能体有望在多个职能领域实现前所未有的效率，但它们也带来了全新的安全和监管风险。

了解更多

在产品发布前确保 AI 驱动的开发安全

洞察开发风险，执行安全策略，并在整个软件开发生命周期中预防漏洞。

预约演示
未找到相关项目。
未找到相关项目。
未找到相关项目。