What happened
The UK cyber agency warned vibe coding could reshape the SaaS industry while adding security risks if organizations do not adapt. Britain’s National Cyber Security Centre issued the warning on Tuesday alongside remarks by chief executive Richard Horne at the RSA Conference in San Francisco. He said AI coding tools could propagate insecure software by exploiting classes of software vulnerabilities that are already known and can be fixed. In a blog post published with the speech, the National Cyber Security Centre said AI-assisted software development is already changing how organizations approach writing code and could significantly disrupt the SaaS model over the next few years. It said developers are already using AI tools to build replacements for SaaS products in hours, while warning that AI-generated code can be unreliable, difficult to maintain, and prone to security flaws.
Who is affected
The exposure is potential and affects organizations using or considering AI-assisted software development, as well as companies in the SaaS industry that could face disruption over several years. The National Cyber Security Centre said adoption will vary based on system complexity and organizations’ risk tolerance.
Why CISOs should care
The issue has business and operational relevance because the National Cyber Security Centre said AI-assisted development could change how software is built while increasing the chance that vulnerable systems are deployed. It also tied the shift to changing economics around building software in-house rather than relying on SaaS platforms.
3 practical actions:
- Set secure defaults for AI coding tools: Ensure AI systems used for software development generate secure code by default, as urged by the National Cyber Security Centre.
- Verify model integrity: Confirm the integrity of the models used in AI-assisted software development before relying on their output in production workflows.
- Expand automated code review and testing: Increase the use of automated code review and testing as AI-assisted development becomes more common across software teams.
For more coverage of policy, strategy, and industry-wide developments, explore our reporting under the Cybersecurity tag.