We spent 20 yrs telling everyone to shift left. Turns out we forgot about the 30 yrs of software sitting in production.

AI is very good at finding bugs in code, and attackers get the same models we do.

Time to shift right.

https://semgrep.dev/blog/2026/shift-right-after-shift-left/