Skip to content
Risks from AI-Generated Apps by Citizen Coders

Risks from AI-Generated Apps by Citizen Coders

First seen 6 Oct 2026, 20:07 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 6, 2026 at 21:29 UTC
  • •AI tools enable rapid app development by non-technical staff, increasing security risks.
  • •Tenable advocates for structured governance frameworks to manage citizen coder activities.
  • •OWASP identifies critical risks associated with AI-assisted citizen development.

As AI tools enable non-technical employees to create workplace applications rapidly, organizations face significant security risks. These AI-generated apps often lack proper oversight, leading to vulnerabilities and compliance issues. Tenable highlights the importance of a structured governance framework to mitigate these risks, emphasizing peer leadership and mandatory training for citizen coders. The OWASP Citizen Development Top 10 identifies critical security risks associated with citizen development, including those arising from AI-assisted coding. The proliferation of these applications can overwhelm IT and security teams, making effective governance essential. Organizations are advised against blanket bans on AI development, as this may drive employees to conceal their activities. Instead, a balanced approach that includes oversight and training is recommended.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-06
Tenable publishes governance framework
Tenable shares best practices for managing risks from AI-generated apps by citizen coders during Cybersecurity Awareness Month.
Tenable
2026-10-06
OWASP releases Citizen Development Top 10
OWASP publishes a list of the top security risks associated with citizen development, focusing on AI-assisted coding.
owasp.github.io

More articles in this cluster (2)

Common questions

What are the main risks of AI-generated apps?
The main risks include security vulnerabilities, compliance issues, and overwhelming IT resources due to the rapid proliferation of these applications.
How can organizations mitigate these risks?
Organizations can implement structured governance frameworks that include oversight, training, and peer leadership to manage citizen coder activities effectively.
What is the OWASP Citizen Development Top 10?
It is a list identifying the most pressing security risks associated with citizen development, particularly focusing on AI-assisted coding and low-code/no-code platforms.