Code shapes how software is built, tested, and delivered—from individual teams to large enterprises. Across 2024, organizations increasingly rely on structured governance like formal SDLC policies, automated testing to reduce release risk, and supply chain security controls such as SBOM and dependency scanning. These choices influence reliability, security incident pressure, and the standards leaders use to manage code at scale.
Key Takeaways
- 2.6 billion people worldwide used software developer tools in 2024, reflecting widespread developer activity and the need for code-centric tooling
- 25% of developers reported using Rust in 2024 Stack Overflow survey results, showing adoption of newer systems languages
- 71% of organizations reported using containers in production environments in 2024 (Kubernetes and containers adoption survey data), supporting modern code deployment workflows
- 72% of enterprises reported having a formal SDLC policy by 2024, indicating more structured code development governance
- The US government required SBOMs for certain federal software acquisitions starting from FY2022 under executive and procurement guidance
- US$ 1.8 trillion is the estimated global spending on software and IT services in 2024 (industry spending baseline including code-dependent spend)
- In the U.S., the average cost of a data breach was $4.45 million (2023 IBM Cost of a Data Breach report), showing the financial impact of insecure or vulnerable code
- The global application development software market was valued at $24.1 billion in 2024 and is forecast to grow through 2029 (code-centric tooling category)
- US$ 9.6 billion global market size for DevOps tooling in 2024 (forecast based estimates), reflecting demand around code automation and pipelines
- NIST SP 800-218 defines 42 activities in SSDF; organizations can map these to secure code practices
- 51% of engineering teams reported using automated tests to reduce release risk in 2024 (State of DevOps survey findings)
- According to OWASP Top 10 (2021), 65% of web applications were vulnerable to injection in common assessments (as reported in OWASP background references)
- The Veracode 2024 State of Software Security Report found that 73% of applications had at least one security flaw on average
- 76% of organizations said software supply chain security (SCA/SBOM/dependency controls) is critical to their security posture (2024)
- 29% of organizations reported experiencing a software-related security incident within the past 12 months (2023)
Developers are scaling secure, automated coding with containers, DevOps, AI, and supply chain safeguards.
Related reading
01 · Category
Industry Trends14 stats
01
71% of organizations reported using containers in production environments in 2024 (Kubernetes and containers adoption survey data), supporting modern code deployment workflowshttps://www.datadoghq.com/state-of-devops/
02
72% of enterprises reported having a formal SDLC policy by 2024, indicating more structured code development governancehttps://www.gartner.com/en/documents/3980740
03
The US government required SBOMs for certain federal software acquisitions starting from FY2022 under executive and procurement guidancehttps://www.cisa.gov/sbom
04
CISA reported that SBOM usage helps reduce response time during security incidents (SBOM guidance impacts)https://www.cisa.gov/news-events/news/cisa-issues-sbom-guidance
05
OpenAI’s Codex research reported an average 28% pass rate improvement on programming tasks versus baseline models (from paper results)https://arxiv.org/abs/2107.03374
06
DeepMind’s AlphaCode achieved a score of 5/100 for passing tasks in the competition benchmark, demonstrating AI coding challengeshttps://www.nature.com/articles/s41586-022-05172-4
07
The number of CVEs increased to over 25,000 in 2023 (annual count from CVE Program / NVD), reflecting code-related vulnerability volumehttps://www.cve.org/Portals/0/News/2024/2023%20CVE%20Statistics.pdf
08
1.4 billion people worldwide used social media platforms in 2019; time series growth enabled large-scale code infrastructure ecosystems (context for software ecosystem spending)https://www.statista.com/statistics/278414/number-of-worldwide-social-network-users/
09
52% of global organizations use AWS services for production workloads (2024 cloud survey)https://www.canalys.com/newsroom/canalys-cloud-end-user-survey-2024
10
64% of software teams reported adopting feature flags to reduce deployment risk (2023)https://www.launchdarkly.com/resources/feature-flags-statistics
11
9.8% of all computers worldwide ran Windows 11 in December 2023, reflecting ongoing software platform evolution that drives continual code changeshttps://gs.statcounter.com/windows-version-market-share/desktop/worldwide
12
4.8 exaFLOPS is the peak performance of Frontier (operational), showing extreme-scale computing workloads that depend on large, continuously evolving software stackshttps://www.olcf.ornl.gov/frontier/
13
62% of organizations report using containers in production (2023), indicating widespread deployment of code artifacts in orchestrated environmentshttps://www.researchgate.net/publication/369130058_2023_Container_Adoption_Report
14
In 2023, the U.S. government reported 5,174 publicly reported security incidents affecting federal organizations under incident reporting requirements, highlighting operational pressure on secure coding and patchinghttps://www.cisa.gov/sites/default/files/2024-05/CISA-FY2023-Federal-Incident-Report.pdf
Interpretation
Industry Trends Interpretation
In 2024, with 71% of organizations running containers in production and 72% reporting formal SDLC policies, the industry is tightening software governance while SBOM requirements from FY2022 and rising AI coding capability are together pushing faster, more secure development workflows.
02 · Category
Performance Metrics6 stats
01
51% of engineering teams reported using automated tests to reduce release risk in 2024 (State of DevOps survey findings)https://www.devops.com/state-of-devops/
02
According to OWASP Top 10 (2021), 65% of web applications were vulnerable to injection in common assessments (as reported in OWASP background references)https://owasp.org/Top10/A01_2021-Broken_Access_Control/
03
The Veracode 2024 State of Software Security Report found that 73% of applications had at least one security flaw on averagehttps://www.veracode.com/securitylabs/state-of-software-security
04
42% of vulnerabilities in applications were found in the composition (dependencies) per a recent report from Snyk (dependency scanning results)https://snyk.io/research/
05
CVSS v3.1 has 7 severity metric levels (including Critical, High, Medium, Low), used to prioritize code vulnerabilitieshttps://www.first.org/cvss/specification-document
06
Google’s Code Search research (2015) found that 60% of vulnerabilities are introduced by new code, emphasizing the importance of secure coding practices that improve code quality metricshttps://research.google/pubs/pub43438/
Interpretation
Performance Metrics Interpretation
With 60% of vulnerabilities introduced by new code and 51% of teams using automated tests to cut release risk in 2024, the performance metrics signal that faster, more reliable delivery depends on building secure testing into ongoing code changes.
03 · Category
Market Economics6 stats
01
$21.1 billion was the global spend on software development tools in 2024 (market estimate)https://www.marketsandmarkets.com/Market-Reports/software-development-tools-market-1274.html
02
$4.6 billion global market size for software composition analysis (SCA) in 2024 (forecast market estimate)https://www.fortunebusinessinsights.com/software-composition-analysis-market-102255
03
$1.9 billion was the global market size for code security testing in 2024 (vendor research market estimate)https://www.grandviewresearch.com/industry-analysis/application-security-market
04
$8.3 billion global market size for application security testing in 2024 (market estimate)https://www.precedenceresearch.com/application-security-testing-market
05
$6.2 billion global market size for API management in 2024 (market estimate)https://www.imarcgroup.com/api-management-market
06
$7.9 billion global market size for developer experience tools in 2024 (market estimate)https://www.strategyr.com/market-reports/Developer-Experience-DX-Tools-Market-1078.asp
Interpretation
Market Economics Interpretation
In Market Economics terms, the tooling ecosystem is expanding fast in 2024 as global spend hits $21.1 billion for software development tools alongside sizable markets of $8.3 billion for application security testing and $7.9 billion for developer experience tools.
More related reading
04 · Category
Market Size3 stats
01
The global application development software market was valued at $24.1 billion in 2024 and is forecast to grow through 2029 (code-centric tooling category)https://www.gartner.com/en/newsroom/press-releases
02
US$ 9.6 billion global market size for DevOps tooling in 2024 (forecast based estimates), reflecting demand around code automation and pipelineshttps://www.globenewswire.com/news-release/2024/01/16/2795088/0/en/DevOps-Tooling-Market-Size-to-Reach-9-6-Billion-by-2024.html
03
NIST SP 800-218 defines 42 activities in SSDF; organizations can map these to secure code practiceshttps://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-218.pdf
Interpretation
Market Size Interpretation
The Market Size outlook is clearly expanding as the global application development software market reaches $24.1 billion in 2024 with growth expected through 2029 and DevOps tooling totals $9.6 billion in 2024, signaling strong financial momentum behind code automation while the rise of structured secure coding guidance like NIST’s 42 SSDF activities supports that demand.
05 · Category
Security & Compliance3 stats
01
76% of organizations said software supply chain security (SCA/SBOM/dependency controls) is critical to their security posture (2024)https://socradar.com/resource/supply-chain-security-statistics/
02
29% of organizations reported experiencing a software-related security incident within the past 12 months (2023)https://www.verizon.com/business/resources/reports/dbir/
03
73% of organizations reported they use container images from a private registry (2024)https://www.docker.com/blog/2024-docker-usage-statistics/
Interpretation
Security & Compliance Interpretation
As 76% of organizations say software supply chain security is critical, yet 29% still experience a software-related security incident in the past year, the Security & Compliance gap is being felt in real life and is amplified by the fact that 73% rely on private container images.
06 · Category
Overview8 stats
01
2.6 billion people worldwide used software developer tools in 2024, reflecting widespread developer activity and the need for code-centric toolinghttps://www.statista.com/statistics/1113925/software-developers-worldwide/
02
25% of developers reported using Rust in 2024 Stack Overflow survey results, showing adoption of newer systems languageshttps://survey.stackoverflow.co/2024/
03
US$ 1.8 trillion is the estimated global spending on software and IT services in 2024 (industry spending baseline including code-dependent spend)https://www.idc.com/getdoc.jsp?containerId=prUS51736524
04
In the U.S., the average cost of a data breach was $4.45 million (2023 IBM Cost of a Data Breach report), showing the financial impact of insecure or vulnerable codehttps://www.ibm.com/reports/data-breach
05
40% of developers said they have experienced production outages caused by code changes (2023)https://research.google/pubs/pub48466/
06
2.5x faster deployment frequency is associated with organizations adopting DevOps practices (DORA research; reported as part of Accelerate/State of DevOps findings)https://dora.dev/research/
07
52% of developers reported using AI tools to assist with coding tasks (2024)https://insights.stackoverflow.com/survey
08
41% of developers reported that documentation is a major pain point during implementation (2023)https://www.gitclear.com/blog/developer-documentation-survey/
Interpretation
Industry Overview Interpretation
Across the code industry, adoption and risk are rising at the same time, with 2.6 billion people using developer tools in 2024 and 40% of developers reporting production outages from code changes, underscoring why industry-wide software investment and better engineering practices are central to the Industry Overview.
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Nathan Caldwell. (2026, February 13). Code Statistics. Gitnux. https://gitnux.org/code-statistics
MLA
Nathan Caldwell. "Code Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/code-statistics.
Chicago
Nathan Caldwell. 2026. "Code Statistics." Gitnux. https://gitnux.org/code-statistics.
Sources & references
40 datasets cited across this report
+5 additional datasets cited (not shown individually)