Code shapes how software is built, tested, and delivered—from individual teams to large enterprises. Across 2024, organizations increasingly rely on structured governance like formal SDLC policies, automated testing to reduce release risk, and supply chain security controls such as SBOM and dependency scanning. These choices influence reliability, security incident pressure, and the standards leaders use to manage code at scale.
Key Takeaways
- 2.6 billion people worldwide used software developer tools in 2024, reflecting widespread developer activity and the need for code-centric tooling
- 25% of developers reported using Rust in 2024 Stack Overflow survey results, showing adoption of newer systems languages
- 71% of organizations reported using containers in production environments in 2024 (Kubernetes and containers adoption survey data), supporting modern code deployment workflows
- 72% of enterprises reported having a formal SDLC policy by 2024, indicating more structured code development governance
- The US government required SBOMs for certain federal software acquisitions starting from FY2022 under executive and procurement guidance
- US$ 1.8 trillion is the estimated global spending on software and IT services in 2024 (industry spending baseline including code-dependent spend)
- In the U.S., the average cost of a data breach was $4.45 million (2023 IBM Cost of a Data Breach report), showing the financial impact of insecure or vulnerable code
- The global application development software market was valued at $24.1 billion in 2024 and is forecast to grow through 2029 (code-centric tooling category)
- US$ 9.6 billion global market size for DevOps tooling in 2024 (forecast based estimates), reflecting demand around code automation and pipelines
- NIST SP 800-218 defines 42 activities in SSDF; organizations can map these to secure code practices
- 51% of engineering teams reported using automated tests to reduce release risk in 2024 (State of DevOps survey findings)
- According to OWASP Top 10 (2021), 65% of web applications were vulnerable to injection in common assessments (as reported in OWASP background references)
- The Veracode 2024 State of Software Security Report found that 73% of applications had at least one security flaw on average
- 76% of organizations said software supply chain security (SCA/SBOM/dependency controls) is critical to their security posture (2024)
- 29% of organizations reported experiencing a software-related security incident within the past 12 months (2023)
Developers are scaling secure, automated coding with containers, DevOps, AI, and supply chain safeguards.
Related reading
01 · Category
Industry Trends14 stats
01
71% of organizations reported using containers in production environments in 2024 (Kubernetes and containers adoption survey data), supporting modern code deployment workflows[1]
02
72% of enterprises reported having a formal SDLC policy by 2024, indicating more structured code development governance[2]
03
The US government required SBOMs for certain federal software acquisitions starting from FY2022 under executive and procurement guidance[3]
04
CISA reported that SBOM usage helps reduce response time during security incidents (SBOM guidance impacts)[3]
05
OpenAI’s Codex research reported an average 28% pass rate improvement on programming tasks versus baseline models (from paper results)[4]
06
DeepMind’s AlphaCode achieved a score of 5/100 for passing tasks in the competition benchmark, demonstrating AI coding challenges[5]
07
The number of CVEs increased to over 25,000 in 2023 (annual count from CVE Program / NVD), reflecting code-related vulnerability volume[6]
08
1.4 billion people worldwide used social media platforms in 2019; time series growth enabled large-scale code infrastructure ecosystems (context for software ecosystem spending)[7]
09
52% of global organizations use AWS services for production workloads (2024 cloud survey)[8]
10
64% of software teams reported adopting feature flags to reduce deployment risk (2023)[9]
11
9.8% of all computers worldwide ran Windows 11 in December 2023, reflecting ongoing software platform evolution that drives continual code changes[10]
12
4.8 exaFLOPS is the peak performance of Frontier (operational), showing extreme-scale computing workloads that depend on large, continuously evolving software stacks[11]
13
62% of organizations report using containers in production (2023), indicating widespread deployment of code artifacts in orchestrated environments[12]
14
In 2023, the U.S. government reported 5,174 publicly reported security incidents affecting federal organizations under incident reporting requirements, highlighting operational pressure on secure coding and patching[3]
Interpretation
Industry Trends Interpretation
In 2024, with 71% of organizations running containers in production and 72% reporting formal SDLC policies, the industry is tightening software governance while SBOM requirements from FY2022 and rising AI coding capability are together pushing faster, more secure development workflows.
02 · Category
Performance Metrics6 stats
01
51% of engineering teams reported using automated tests to reduce release risk in 2024 (State of DevOps survey findings)[13]
02
According to OWASP Top 10 (2021), 65% of web applications were vulnerable to injection in common assessments (as reported in OWASP background references)[14]
03
The Veracode 2024 State of Software Security Report found that 73% of applications had at least one security flaw on average[15]
04
42% of vulnerabilities in applications were found in the composition (dependencies) per a recent report from Snyk (dependency scanning results)[16]
05
CVSS v3.1 has 7 severity metric levels (including Critical, High, Medium, Low), used to prioritize code vulnerabilities[17]
06
Google’s Code Search research (2015) found that 60% of vulnerabilities are introduced by new code, emphasizing the importance of secure coding practices that improve code quality metrics[18]
Interpretation
Performance Metrics Interpretation
With 60% of vulnerabilities introduced by new code and 51% of teams using automated tests to cut release risk in 2024, the performance metrics signal that faster, more reliable delivery depends on building secure testing into ongoing code changes.
03 · Category
Market Economics6 stats
01
$21.1 billion was the global spend on software development tools in 2024 (market estimate)[19]
02
$4.6 billion global market size for software composition analysis (SCA) in 2024 (forecast market estimate)[20]
03
$1.9 billion was the global market size for code security testing in 2024 (vendor research market estimate)[21]
04
$8.3 billion global market size for application security testing in 2024 (market estimate)[22]
05
$6.2 billion global market size for API management in 2024 (market estimate)[23]
06
$7.9 billion global market size for developer experience tools in 2024 (market estimate)[24]
Interpretation
Market Economics Interpretation
In Market Economics terms, the tooling ecosystem is expanding fast in 2024 as global spend hits $21.1 billion for software development tools alongside sizable markets of $8.3 billion for application security testing and $7.9 billion for developer experience tools.
More related reading
04 · Category
Market Size3 stats
01
The global application development software market was valued at $24.1 billion in 2024 and is forecast to grow through 2029 (code-centric tooling category)[2]
02
US$ 9.6 billion global market size for DevOps tooling in 2024 (forecast based estimates), reflecting demand around code automation and pipelines[25]
03
NIST SP 800-218 defines 42 activities in SSDF; organizations can map these to secure code practices[26]
Interpretation
Market Size Interpretation
The Market Size outlook is clearly expanding as the global application development software market reaches $24.1 billion in 2024 with growth expected through 2029 and DevOps tooling totals $9.6 billion in 2024, signaling strong financial momentum behind code automation while the rise of structured secure coding guidance like NIST’s 42 SSDF activities supports that demand.
05 · Category
Security & Compliance3 stats
01
76% of organizations said software supply chain security (SCA/SBOM/dependency controls) is critical to their security posture (2024)[27]
02
29% of organizations reported experiencing a software-related security incident within the past 12 months (2023)[28]
03
73% of organizations reported they use container images from a private registry (2024)[29]
Interpretation
Security & Compliance Interpretation
As 76% of organizations say software supply chain security is critical, yet 29% still experience a software-related security incident in the past year, the Security & Compliance gap is being felt in real life and is amplified by the fact that 73% rely on private container images.
06 · Category
Overview8 stats
01
2.6 billion people worldwide used software developer tools in 2024, reflecting widespread developer activity and the need for code-centric tooling[7]
02
25% of developers reported using Rust in 2024 Stack Overflow survey results, showing adoption of newer systems languages[30]
03
US$ 1.8 trillion is the estimated global spending on software and IT services in 2024 (industry spending baseline including code-dependent spend)[31]
04
In the U.S., the average cost of a data breach was $4.45 million (2023 IBM Cost of a Data Breach report), showing the financial impact of insecure or vulnerable code[32]
05
40% of developers said they have experienced production outages caused by code changes (2023)[18]
06
2.5x faster deployment frequency is associated with organizations adopting DevOps practices (DORA research; reported as part of Accelerate/State of DevOps findings)[33]
07
52% of developers reported using AI tools to assist with coding tasks (2024)[34]
08
41% of developers reported that documentation is a major pain point during implementation (2023)[35]
Interpretation
Industry Overview Interpretation
Across the code industry, adoption and risk are rising at the same time, with 2.6 billion people using developer tools in 2024 and 40% of developers reporting production outages from code changes, underscoring why industry-wide software investment and better engineering practices are central to the Industry Overview.
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Nathan Caldwell. (2026, February 13). Code Statistics. Gitnux. https://gitnux.org/code-statistics
MLA
Nathan Caldwell. "Code Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/code-statistics.
Chicago
Nathan Caldwell. 2026. "Code Statistics." Gitnux. https://gitnux.org/code-statistics.
Sources & references
35 sources cited across this report
datadoghq.com
gartner.com
cisa.gov
arxiv.org
nature.com
cve.org
statista.com
canalys.com
launchdarkly.com
gs.statcounter.com
olcf.ornl.gov
researchgate.net
devops.com
owasp.org
veracode.com
snyk.io
first.org
research.google
marketsandmarkets.com
fortunebusinessinsights.com
grandviewresearch.com
precedenceresearch.com
imarcgroup.com
strategyr.com
globenewswire.com
nvlpubs.nist.gov
socradar.com
verizon.com
docker.com
survey.stackoverflow.co
idc.com
ibm.com
dora.dev
insights.stackoverflow.com
gitclear.com