Security Journey unveils AI-era developer manifesto

Security Journey has rolled out a Developer Manifesto and a redesigned training platform that centres on developer workflows and AI-driven coding practices.

The US-based secure coding training provider positioned the manifesto as a statement of principles for building software security in an environment where developers increasingly use AI tools. It also acts as the design basis for changes across the Security Journey platform, including new training content and product features.

Security teams have warned that AI is changing the threat landscape as well as day-to-day software development. In the same announcement, Security Journey cited research findings that 87% of security professionals reported their organisations had encountered an AI-driven cyberattack. It also cited a figure that 91% of security experts expect a surge in AI-driven threats over the next two years.

Manifesto focus

The manifesto sets out a view that AI can raise development speed and output, while developers still make the decisions that shape security outcomes. It also argues that security practices need to keep pace with changes in development workflows.

Dan Newton, CEO of Security Journey, framed the manifesto as a response to AI adoption across software teams.

"AI is transforming how software is created, and that's good for developers-and good for security," said Dan Newton, CEO, Security Journey.

Security Journey said its manifesto "celebrates developers' ability to lead this transformation" and sets out how the company approaches AI-assisted development alongside secure coding practices.

Platform changes

The redesigned Security Journey platform includes updates that change how users navigate training and how organisations manage programme rollout. The company described the new environment as visually modern, with support for light and dark modes.

Another product update adds developer profiles. These capture information such as experience, programming languages and tooling. Security Journey said this data is used to personalise training and reduce friction for learners.

The platform also introduces an AI-readiness assessment. It tests knowledge of foundational concepts and advanced attack vectors in AI and large language model security.

Security Journey has also added new training modules focused on AI, large language models and what it calls "vibe coding". The company described these modules as hands-on learning experiences that mirror contemporary coding environments and AI-assisted development practices.

GitHub integration

A new GitHub integration aims to connect training decisions more directly with code risk seen in repositories. According to Security Journey, the integration identifies Common Weakness Enumerations as they are committed to code. It then supports targeting training to individual developers based on the risk signals observed in their commits.

This approach reflects a broader shift in application security towards using development telemetry as a guide for education and process changes. Many security teams have tried to reduce time spent on generic training that does not match the technologies and coding patterns used by specific groups.

Guardian AI

Security Journey also introduced a feature called Aspen: Guardian AI. The company said it uses real scanner findings and updates AI rules dynamically. It said the objective is to guide AI coding assistants away from known security mistakes and reduce repeat issues linked to AI-assisted coding.

The move follows rising interest in controlling how generative AI tools behave inside software engineering environments. Security teams have raised concerns about insecure code suggestions and the risk of teams repeating patterns that scanners consistently flag across projects.

Developer culture

Security Journey linked the manifesto and platform changes to developer engagement and security culture. It presented secure development as a workflow issue and a skills issue, rather than a compliance exercise.

Michael Burch, Director of Application Security at Security Journey, linked developer confidence with how teams use AI tools.

"When developers grow more secure in their skills, they grow more confident in what AI can help them achieve," said Michael Burch, Director of Application Security, Security Journey.

Alongside the product update, Security Journey highlighted its community activity through the Security Champions Podcast and Security Champions Summit. The company said the 2025 event drew more than 500 registrants across 30 countries.

Security Journey said the manifesto will continue to guide product direction as AI tooling becomes more common across development teams and as organisations look for ways to manage AI-driven security risks in the software supply chain.