61 percent of all internally-developed applications failed a basic test of compliance with the OWASP Top 10 list on their first pass. And commercially developed software did even worse, with a 75 percent failure rate. Veracode: 35 percent of applications they tested had a 35 percent security breach rate. The number of vulnerabilities per applications can improve dramatically when application scanning is added to the development process. The earlier on in the process they’re caught, the easier they are to fix them, experts say.”]
Source: https://www.csoonline.com/article/3136264/why-dont-developers-have-a-spellchecker-for-security.html