IXygeni iphumelele amabhaso amabini eGlobal InfoSec ngenxa Ukhuseleko lweSicelo seGenAI kwaye Application Security Posture Management (ASPM) kunye nokuqaphela umsebenzi wenkampani ekuncedeni amaqela okhuseleko kunye nobunjineli ukunciphisa ingxolo, ukubeka phambili umngcipheko wokwenene, kunye nokuqinisekisa uphuhliso oluncediswa yi-AI ngaphandle kokucothisa ukuhanjiswa. Kumaqela anamhlanje e-DevSecOps, oku kubalulekile kuba imakethi isiya ngokukhawuleza kwicala elisekelwe kumngcipheko. ASPM kwaye ukhusele uphuhliso lwendalo lwe-AI, hayi iiskena ezizimeleyo kunye nezilumkiso ezingaxhunyiwe. UGartner sele ezibalule zombini Application Security Posture Management kwaye AI Code Security AbaNcedisi njengeendawo zotshintsho kwi-AppSec yanamhlanje, ngelixa ikwalumkisa ukuba uphuhliso oluqhutywa yi-AI kunye ne-vibe coding ziyandisa umphezulu wohlaselo.
Ezi mbasa zimbini zibonisa inyani elula. Amaqela okhuseleko awadingi okungakumbi dashboards. Bafuna umxholo ocacileyo, ukubeka phambili ngokwenene, kunye nokulungiswa okukhuselekileyo kwimvelisoYilapho kanye iXygeni igxile khona, ukusuka kwikhowudi ukuya kwilifu kunye nokusuka kwikhowudi ebhalwe ngumntu ukuya kwikhowudi eyenziwe yi-AI.
Kutheni Ezi Mbasa Zimbini Zibalulekile
Ukuphumelela kuzo zombini iindidi kubalulekile kuba kubonisa ukuba i-AppSec ayisahlulwanga phakathi "kokhuseleko lwesicelo sendabuko" kunye "nokhuseleko lwe-AI." Namhlanje, ezo hlabathi ziqhagamshelwe.
Amaqela ophuhliso athumela ngokukhawuleza, esebenzisa umthombo ovulekileyo ngakumbi, exhomekeke kokuninzi CI/CD ukwenza izinto ngokuzenzekelayo, kunye nokwamkela ngakumbi abancedisi beekhowudi ze-AI kunye neendlela zokusebenza ze-arhente. Kwangaxeshanye, iinkokheli zokhuseleko ziphantsi koxinzelelo lokunciphisa iziphumo ezingezizo ezilungileyo, zichaze umngcipheko weshishini ngokucacileyo, kwaye zenze ukulungiswa ngokuzenzekelayo ngaphandle kokuphazamisa imveliso. UGartner uchaza olu tshintsho ngokuthe ngqo: Uphuhliso oluncediswa yi-AI luzisa iingxaki ezintsha zokhuseleko, ngelixa ASPM, uhlalutyo lokufikelela, kunye nokulungiswa okusekwe kwi-AI kuya kuba yinto ephambili ekuphuculeni i-DevSecOps.
Yiyo loo nto la mabhaso ehambelana kakuhle kangaka. Xygeni ASPM njengeplani yokulawula umngcipheko wokusetyenziswa. Omnye uyayiqonda I-DevAI njengomaleko wokuthintela ukukhusela ikhowudi eyenziwe yi-AI kunye ne-AI-assisted ngaphambi kokuba ibe yingxaki yemveliso.
Kutheni iXygeni Iphumelele Ukhuseleko lweSicelo seGenAI
Ibhaso le-GenAI Application Security ligxininisa umngeni owahlukileyo, kodwa ongxamisekileyo ngokulinganayo: indlela yokufumana ikhowudi xa i-AI ngoku iyinxalenye yomsebenzi wophuhliso.
Kulapho I-DevAI Iyabonakala. Endaweni yokuphatha umngcipheko we-AI njengengxaki eyahlukileyo yexesha lokusebenza, i-Xygeni izisa ukhuseleko kwinqanaba apho kwenziwa khona ikhowudi. Eli qonga lidibanisa uhlalutyo olunzulu lwe-static, ukubekwa phambili okusekelwe ekusetyenzisweni, i-AI AutoFix, kunye nokufunyanwa okuqaphela i-malware ukunceda abaphuhlisi ukubamba nokulungisa iipatheni ezinobungozi kwangethuba.
Le ndlela ibaluleke kakhulu ngoku. UGartner uthi ngo-2027, ubuncinci i-30% yokuvezwa kokhuseleko lwezicelo kuya kuvela kwiindlela zokubhala ikhowudi ye-vibe, kwaye ngo-2026, ubuncinci i-40% yemibutho iya kusilela ukuhlawula abathengisi bayo bovavanyo lokhuseleko lwezicelo ukuze balungise ngokuzenzekelayo ikhowudi esengozini ngokusekelwe kwi-AI.
Ukhuseleko kwindawo yokudala ikhowudi
I-DevaI ixhasa imodeli yokuthintela. eXygeni's code security izixhobo zichaza ukuba iqonga lenza uhlalutyo olunzulu oluzinzileyo ukuze kufunyanwe iziphene zokufakwa, i-XSS, imiba yememori, ukulungelelaniswa okungalunganga, kunye neepatheni zekhowudi ezinobungozi, ngelixa lihluza iziphumo nge-funnel ye-exploitation-based prioritization ukuze amaqela agxile kwinto enokuxhaphazwa, kungekuphela nje kwinto ekhoyo.
Loo nto ibalulekile. Kuphuhliso oluncediswa yi-AI, isantya asiyongxaki iphambili. Ukuzithemba okungajongwanga yiyo. Abaphuhlisi banokwenza ikhowudi ngokukhawuleza, kodwa basafuna ukuqinisekiswa okuqinisekileyo, umxholo wokhuseleko, kunye nokulungiswa okukhuselekileyo.
Ukulungiswa kwe-AI okunokusetyenziswa ngabaphuhlisi ngokwenene
I-AI AutoFix kaXygeni yongeza loo maleko ulandelayo. Ivelisa iingcebiso zokulungisa ezisekelwe kumxholo, ithatha indawo yeepateni ezinobungozi ngezinye iindlela ezikhuselekileyo, kwaye idala pull requests kunye nezilungiso ezihambelana neendlela ezilungileyo zolwimi.
Oku kubalulekile kuba ikamva loKhuseleko lweSicelo seGenAI alikho nje malunga nokuchongwa. Limalunga ukulungiswa okukhuselekileyo kwimvelisoIsixhobo esifumana iingxaki kodwa esingenakuzinceda ekuzisombululeni ngaphakathi komsebenzi wongeza ukungqubana. Isixhobo esinokukhokela ukulungiswa okukhuselekileyo kwimeko siphucula ukhuseleko kunye nesantya somphuhlisi.
Guardrails yophuhliso oluncediswa yi-AI kunye ne-arhente
Ibali leGenAI libanzi ngaphezu kokugqitywa kwekhowudi. I-Gartner's 2025 Hype Cycle for Application Security ibiza iModel Context Protocol, i-AI code security abancedisi, ukhuselo lwexesha lokusebenza lwe-AI, kunye ne-vibe coding njengeenguqu ezinkulu kwi-AppSec. Ikwalumkisa ukuba i-MCP izisa iinkxalabo ezintsha zokugunyaziswa kunye nobumfihlo, kwaye ikhowudi eyenziwe yi-AI akufuneki iphathwe njengekhuselekileyo ngokwemvelo.
Loo mongo wenza ukuba indawo ye-DevAI yeXygeni ibe yeyona ibalulekileyo. Ixabiso alikho nje kuphela ekubeni linceda abaphuhlisi ukulungisa ikhowudi. Ixabiso kukuba lizisa guardrails apho imveliso eyenziwe yi-AI idibana nemisebenzi yobunjineli yokwenyani.
Kutheni iXygeni iphumelele Application Security Posture Management
Application Security Posture Management kufuneka yenze okungaphezulu kokuqokelela iziphumo. Oku kufanele kuncede amaqela ukuba agqibe ukuba yintoni ebalulekileyo ngoku.
IXygeni's ASPM Indlela yokusebenza yakhelwe kuloo ngcamango. Eli qonga lidibanisa iimpawu kulo lonke umjikelo wobomi bokuhanjiswa kwesoftware, kuquka iindawo zokugcina iikhowudi, ukuxhomekeka, pipelines, yakha iifayile, iziseko zophuhliso njengekhowudi, kunye nezixhobo zelifu, emva koko ziqhubeka nokubonisa ubudlelwane bazo kunye nesimo sabo ngokwemeko.
Oko kubalulekile kuba uninzi lwamaqela lusaqhubeka nokuntywiliselwa zizilumkiso ezingaphelelanga. Ngokutsho kweXygeni's ASPM izixhobo, ama-48% emibutho afumana izilumkiso ezingaphezu kwe-10,000 ngosuku, kwaye ukuya kuthi ga kwi-52% yezo zilumkiso zizinto ezilungileyo ezingezizo. I-Xygeni ijongana naloo ngxaki ngokubekwa phambili komxholo oqwalasela ubudlelwane bezinto, ubukhali, ukusetyenziswa, ukuvezwa, impembelelo yeshishini, kunye nemigangatho echazwe ngabathengi, inceda ukunciphisa ingxolo engeyomfuneko ukuya kuthi ga kwi-90%.
Umaleko womxholo wokwenyani, hayi esinye iskena
I-Xygeni ayibeki kwindawo yayo ASPM njengesixhobo sokudibanisa iskena. Endaweni yoko, yakha uluhlu lwezinto ezisetyenzisiweyo kunye nolwahlulo lonxibelelwano kuyo yonke SDLCIchonga iiasethi ngokuzenzekelayo, ilandelela ukuxhomekeka kunye nabaxhasi, kwaye inika amaqela umbono wekhowudi ukuya kwilifu womngcipheko wesicelo.
Kulapho kanye ikhoyo le mihla ASPM kudala ixabiso. UGartner uchaza ASPM njengendlela yokulawula umngcipheko wesicelo ngokuqhubekayo ngokuqokelela, ukuhlalutya, kunye nokubeka phambili imiba yokhuseleko kulo lonke umjikelo wobomi besoftware, ukunceda amaqela ukuba anyanzelise umgaqo-nkqubo kwaye alungise ngokufanelekileyo.
Ukubeka phambili izinto ngendlela eguqukayo okubonisa umngcipheko wokwenyani
Inxalenye ebalaseleyo yeXygeni's ASPM ibali lelo i-funnel yokubeka phambili izinto ngokuguquguqukayoAbathengi banokuchaza amanqanaba asibhozo baze baphucule ukubekwa phambili ngezinto ezinje ngokufikeleleka, ukuxhaphazwa, kunye nemigangatho ethile yeshishini. Ngokwenyani, oko kuthetha ukuba amaqela anokuyeka ukuphendula kumthamo aze aqale ukulungisa oko kufikelelekayo, okubonakalayo, okanye okubalulekileyo ekusebenzeni.
Eso sisizathu esinamandla sokuba olu lwazi lube nengqiqo. Ngo-2026, eyona ilungileyo ASPM Amaqonga awanazo ezibonisa idatha eninzi. Ngawo aguqula ubunzima bube luluhlu olufutshane noluthembekileyo lwezenzo.
Iindlela zokusebenza ezingcono, hayi ukungqubana okungakumbi
IXygeni's ASPM Ikwanceda ukuvala i-loop ngokusebenzayo. Idibanisa iingxelo zokhuseleko zomntu wesithathu, ilungelelanisa iziphumo, kwaye ibeka kwindawo enye imisebenzi yokulungisa ukuze amaqela akwazi ukulungelelanisa ngokukhawuleza kuzo zonke izixhobo ezahlukeneyo kunye neendawo ezingqongileyo.
Kwiinkokeli zokhuseleko, oku kuthetha into ebaluleke ngakumbi kunokubonakala kuphela: ukulinganisa okungcono, ubunini obucacileyo, kunye nokuphucula ukuma okulinganisekayo ngokuhamba kwexesha.
Imodeli ye-AppSec eyomeleleyo ka-2026
Xa zizonke, ezi mbasa zimbini zikhomba umyalezo obanzi.
I-AppSec yanamhlanje isiya phambili:
- umxholo odibeneyo endaweni yeziphumo ezizodwa
- ukubeka phambili okusekelwe ekuxhaphazeni endaweni yokulinganisa ubunzima kuphela
- ukulungiswa okuzenzakalelayo endaweni yokukhula kwe-backlog ngesandla
- ukhuseleko lwe-AI oluthintelayo endaweni yokucoca okusebenzayo
- imisebenzi yonjiniyela kuqala endaweni yeengxaki zokhuseleko
Iqonga likaXygeni lihambelana ngokusondeleyo nelo cala. ASPM icala, idibanisa imiqondiso kwikhowudi, ilifu, pipelines, ukuxhomekeka, kunye nesimo. Kwicala le-GenAI, inceda amaqela ukuba akhusele ikhowudi eyenziwe yi-AI nebhalwe ngabantu kwangethuba, kunye nokubekwa phambili kunye nokulungiswa okwakhelwe kumsebenzi.
Kungoko ke ukuqatshelwa kwayo kungaphezulu nje kwento ebalulekileyo. Oku kubonisa apho iinkqubo ze-AppSec ziya khona ngokulandelayo.
Oku kuthetha ukuthini kumaqela oKhuseleko nobunjineli
kuba CISOs, iinkokheli ze-AppSec, kunye namaqela e-DevSecOps, oku kuluncedo.
Ukuba amaqela akho asatshintshana phakathi kwezikena, ehlalutya iziphumo eziphindaphindwayo ezingapheliyo, kwaye ezama ukulawula uphuhliso oluncediswa yi-AI ngaphandle kokucaca guardrails, imodeli endala sele iphantsi koxinzelelo.
Isigaba esilandelayo se-AppSec sifuna:
- umbono omnye womngcipheko kulo lonke ilizwe SDLC
- ukubeka phambili izinto ngokusekelwe ekusebenziseni izinto ngendlela yokwenyani kunye nomxholo weshishini
- ukulungiswa okuzenzakalelayo okuhambelana nemisebenzi yobunjineli
- ulawulo oluqinileyo lwekhowudi eyenziwe yi-AI kunye nekhowudi encediswa yi-AI
- isignali engcono, ingxolo encinci
Yiyo loo ndawo apho iXygeni iqatshelwa khona.
Ukuthathwa kokugqibela
IXygeni iphumelele amabhaso amabini eGlobal InfoSec ngenxa ASPM kwaye Ukhuseleko lweSicelo seGenAI kuba zombini ezi ndidi ngoku zifuna into efanayo: ukhuseleko oluhambelana nomxholo, olusebenzayo, nolwakhelwe indlela isoftware ephuhliswa ngayo namhlanje.
ASPM kufuneka bancede amaqela alungise iingozi ezifanelekileyo kuqala.
Ukhuseleko lweSicelo seGenAI lufanele luncede amaqela asebenzise izixhobo zokubhala ikhowudi ze-AI ngaphandle kokudala amabala angacacanga.
IXygeni iyakha zombini.
Malunga uMbhali
Umseki kunye neCTO
UFatima Said igxile kumxholo wokuqala wabaphuhlisi be-AppSec, i-DevSecOps, kunye software supply chain securityUguqula imiqondiso yokhuseleko enzima ibe yisikhokelo esicacileyo nesisebenzayo esinceda amaqela ukuba abeke phambili izinto ngokukhawuleza, anciphise ingxolo, kwaye athumele ikhowudi ekhuselekileyo.
