Application security slowly shifts left