Datadog Releases DevSecOps Report 2026
Analysis based on 9 articles · First reported Feb 26, 2026 · Last updated Feb 26, 2026
The report highlights significant cybersecurity vulnerabilities across the software industry, suggesting increased demand for security and observability solutions. This could positively impact companies like Datadog that provide such platforms, while raising concerns for organizations with unaddressed vulnerabilities.
Datadog, Inc. released its 'State of DevSecOps Report 2026', revealing that 87% of organizations have at least one known exploitable vulnerability in deployed services. The report emphasizes a shift in security risk upstream into the software supply chain due to accelerated development, automation, and reliance on third-party components. Key findings include 42% of services relying on unmaintained libraries, 50% of organizations adopting new library versions within 24 hours, and only 4% pinning Microsoft===GitHub Actions to specific versions, increasing supply-chain risks. Andrew Krug, Head of Security Advocacy at Datadog, noted that security practices haven't kept pace with software development changes, leading to alert fatigue where only 18% of 'critical' vulnerabilities are truly critical. Yadi Narayana, CTO for APJ at Datadog, added that regulatory pressures in Australia and New Zealand have improved governance, but execution remains a challenge.
Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.
Open Dashboard