The most popular and comprehensive Open Source ECM platform
Let us know more
Low-Code: Quicker Development but Potentially a Security Risk
Low-code/No-code has been hailed as the tool that will empower non-developers in an organization with the ability to define and change the processes and configurations of enterprise software applications. The benefits of low code are that it requires no coding knowledge, it speeds up application development and maintenance, and it encourages innovation.
Cristina Goldt, general manager at Workday, said that “most companies today would say that whatever industry they are in, they are a technology company. Technology is definitely changing to be a lot easier to adapt and we are seeing more of that. Bringing in low-code technology is part of a strategy to make things easier.”
Claus Jepsen, Chief Technology Officer at Unit4, said that “with review and approval processes in place, both IT organizations and employees can find a mutual benefit in the creation of ‘citizen-built’ applications.”
But all is not so rosy with Low Code/No Code. While Low Code has been criticized as difficult to scale, an even bigger worry about Low Code/No Code is that it has the potential to be a security nightmare.
Vinay Mamidi, senior director of project management at Virsec, said that “while trained developers may have varying levels of skill in security, no-code developers are generally oblivious to security best practices or risks.”
Processes developed using low code often come into contact with some of the enterprise’s most sensitive data. The inner workings of low-code modules are a black box and frequently are not vetted as strongly as a core application by the quality assurance of software vendors. Additionally, Low Code is often loose in how access control and business permissions are applied — done primarily to simplify code implementation for non-developers.
Chris Hughes, a co-founder of Aquia, wrote that “by allowing more people in an enterprise to develop applications, low-code development creates new vulnerabilities and can hide problems from security.”
There are concerns regarding the security risks associated with low-code development. To help address and prevent these issues, we’ve compiled some useful tips.