Morningstar AI-Assisted Development Costs Enterprises 13,900+ Engineering Hours Annually
Article Content
- •AI-assisted development consumes over 13,900 engineering hours annually for organizations with 100 engineers.
- •93% of surveyed leaders report increased productivity from AI, but governance struggles to keep pace.
- •Only 31% of organizations have quantified the total cost of unmanaged open source risk.
A study by ActiveState reveals that AI-assisted development leads to significant hidden costs for enterprises, consuming over 13,900 engineering hours annually per organization with 100 engineers. Each engineer reportedly spends at least 139 hours a year addressing issues related to AI-assisted work. The costs associated with release delays, compliance findings, and security incidents are absorbed by different budgets, making it difficult for organizations to quantify the total expense. The survey included 307 leaders from engineering, security, and compliance sectors across North America and Western Europe. While 93% of respondents noted increased productivity due to AI, 83% acknowledged that developer productivity is outpacing governance capabilities. Only 31% of organizations have quantified the total cost of unmanaged open source risk, indicating a lack of visibility into the overall financial impact of these challenges.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track ActiveState in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
How many hours do engineers spend on AI-related issues?
What percentage of organizations have quantified open source risk?
Is the productivity increase from AI significant?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…