However, Veracode’s 2026 GenAI Code Security Report reveals a disconnect between improvements in AI coding capability and improvements in security. Key takeaways of the Veracode reportAI-generated code security remains largely stagnant , with Veracode reporting an average security pass rate of approximately 56% despite near perfect syntax performance. Programming language and vulnerability type affect AI code security , with Python outperforming Java and results varying widely across vulnerability categories. Require human review of high-risk AI-generated code rather than relying solely on an AI model’s ability to produce functional code. Organizations should treat AI-generated code like other unreviewed code, requiring security testing, remediation, and validation before it reaches production.