The 500+ respondents to our 2022 survey gave us priceless insights into the workings of everyday application security programs. From developers to CISOs and from early stage upstarts to mature industry titans, our report sampled individuals and businesses of all walks—but the coincidence among opposites might surprise you. Some things we'll be keeping close tabs on this year to compare with the last: how orgs stack up against an "AppSec leader" in terms of critical/high risk vulns released, the average release cadence, how teams approach tooling, the unity of infra security tools with AppSec ones, and of course, what today's top challenges are.