60 percent of all applications brought to security testing company Veracode couldn’t meet minimum standards for acceptable security. Web-based apps carry their own special set of risks. Developers trained with software that’s generated and used in one location with a single set of servers often don’t understand the precautions needed for Web applications that take code, data, and elements of the interface from many servers. Homegrown applications failed 54 percent of the time; commercial and open-source applications failed more often than homegrown.”]
Source: https://www.csoonline.com/article/2125991/many-apps-flunk-security-check-before-move-to-cloud.html