Skip to main content
Cybersecurity Statistics

Cybersecurity statistics / Code Review

26.35% of repositories require no code review before merging.

PublisherOrca Security
Report2026 State of Application Security Report
Published7 April 2026
TopicsCode Review, Repositories

Published by Orca Security in 2026 State of Application Security Report , 7 April 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

39% of organizations added automated code review to address AI-generated code.
Flux, 04/07/2026
85% of developers and technology buyers agree AI has shifted the bottleneck from writing code to reviewing and validating it.
GitLab, 28/06/2026
52% of development teams experience bottlenecks in manual review related to AI-generated code.
Black Duck, 15/06/2026
38% of organizations still rely primarily on manual review for AI-generated code.
Salt Security, 06/06/2026
Application of custom rules to automated code review tools to catch issues unique to AI-generated code increased by 10%.
Black Duck, 09/02/2026
AI-generated pull requests wait 4.6 times longer for review than human-written pull requests.
Opsera, 04/02/2026

Get the newsletter

Weekly cybersecurity statistics by email.