Gartner defines the application security testing (AST) market as consisting of providers of products that enable organizations to assess applications for the presence and management of risk. These products identify risk by evaluating source code, performing runtime tests and inspecting supply chain components. AST products can be integrated throughout development workflows for continuous assessment or be used to perform ad hoc evaluations. They enable organizations to manage application risks by providing an integrated set of capabilities for risk identification, prioritization and triage, policy evaluation and enforcement, and remediation assistance. Market offerings are available in on-premises, SaaS and hybrid delivery models. Organizations leverage AST products to assess applications for the presence of security vulnerabilities and other risks (e.g., legal and operational) throughout their life cycle. These assessments are used to measure and manage the risks within individual applications, application components or groups of applications in the context of their business criticality and other key attributes (e.g., environment, sensitive data handling, etc.). AST products further enable organizations to evaluate software for compliance with internal policies as well as regulatory requirements established by governments or authoritative industry groups.
Gartner defines a data science and machine learning platform as an integrated set of code-based libraries and low-code tooling. These platforms support the independent use and collaboration among data scientists and their business and IT counterparts, with automation and AI assistance through all stages of the data science life cycle, including business understanding, data access and preparation, model creation and sharing of insights. They also support engineering workflows, including the creation of data, feature, deployment and testing pipelines. The platforms are provided via desktop client or browser with supporting compute instances or as a fully managed cloud offering.
Gartner defines DevOps platforms as those that provide fully integrated and orchestrated capabilities to enable continuous delivery of software using agile and DevOps practices. The capabilities span the development and delivery life cycle built around the continuous integration/continuous delivery (CI/CD) pipeline, including planning, creation, artifact management, security, quality engineering, change management, compliance, environment management, deployment and monitoring. DevOps platforms support team collaboration, consistency, tool simplification and measurement of software delivery metrics. They are delivered primarily as cloud-hosted services with some options for on-premises deployment. DevOps platforms simplify the creation, maintenance and management of the components required for the delivery of various types of modern software. Platforms create common workflows and data models, simplify user access, provide production-like development and test environments, and provide a consistent user experience (UX) to reduce cognitive load. They lead to improved visibility, auditability and traceability for the software delivery value stream. This end-to-end view encourages a systems-thinking mindset and accelerates feedback loops. Organizations use DevOps platforms to minimize tool friction resulting from complex toolchains, manual handoffs and lack of consistent visibility throughout the software development life cycle (SDLC). This enables product teams to deliver faster customer value without compromising quality. The DevOps platforms market reflects the consolidation of technologies across development, security, infrastructure and operations to streamline software delivery.
Gartner defines Software Composition Analysis (SCA) as a technology that analyzes applications and related artifacts (containers, registries, etc.) to detect open-source and third-party software components known to have security and functional vulnerabilities, are out-of-date for security patches, or that pose licensing risks. SCA products and services help ensure the enterprise software supply chain includes only secure components and, therefore, supports secure application development and assembly