Gartner Research

Hype Cycle for Application Security, 2017

Published: 28 July 2017

ID: G00314199

Analyst(s): Ayal Tirosh


Application security is a central component of enterprise security. Organizations continue to struggle with adapting application security to trends like mobility and cloud, while applications remain one of the last control points for imposing the organization's security policy.

Table Of Contents


  • What You Need to Know
  • The Hype Cycle
  • The Priority Matrix
  • Off the Hype Cycle
  • On the Rise
    • Application Security Testing Orchestration
    • Application Monitoring and Protection
    • API Threat Protection
    • Application Vulnerability Correlation
    • Container Security
    • Application Security Requirements and Threat Management
    • Business-Critical Application Security
  • At the Peak
    • Crowdsourced Security Testing Platforms
    • Bot Management
    • Mediated APIs
    • Format-Preserving Encryption
    • Mobile Threat Defense
    • User and Entity Behavior Analytics
    • Privacy by Design
  • Sliding Into the Trough
    • Runtime Application Self-Protection
    • Protected Mobile Browsers
    • Enterprise Mobile App Stores
    • Application Shielding
    • DevSecOps
    • Dynamic Data Masking
    • Interactive Application Security Testing
    • Cloud Access Security Brokers
  • Climbing the Slope
    • Managed WLAN
    • Mobile Application Security Testing
    • SOA Testing
    • Software Composition Analysis
    • Application Security Professional Services
    • Database Audit and Protection
    • Web Application Firewalls
  • Entering the Plateau
    • Application Security as a Service
    • Static Application Security Testing
    • Application Control
    • SIEM
    • Dynamic Application Security Testing
  • Appendixes
    • Hype Cycle Phases, Benefit Ratings and Maturity Levels

Gartner Recommended Reading

©2021 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. and its affiliates. This publication may not be reproduced or distributed in any form without Gartner’s prior written permission. It consists of the opinions of Gartner’s research organization, which should not be construed as statements of fact. While the information contained in this publication has been obtained from sources believed to be reliable, Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Although Gartner research may address legal and financial issues, Gartner does not provide legal or investment advice and its research should not be construed or used as such. Your access and use of this publication are governed by Gartner’s Usage Policy. Gartner prides itself on its reputation for independence and objectivity. Its research is produced independently by its research organization without input or influence from any third party. For further information, see Guiding Principles on Independence and Objectivity.

Already have a Gartner Account?

Purchase this Document

To purchase this document, you will need to register or sign in above

Become a client

Learn how to access this content as a Gartner client.