Java Developers Prefer Pre-Hardened Container Security Solutions

Java developers are increasingly seeking effective solutions for container security, with a significant portion preferring to rely on pre-hardened images rather than managing vulnerabilities independently. This insight comes from a survey conducted by BellSoft, which provides the Liberica JDK, an open-source implementation of Java SE. The survey, part of the 2025 State of Container Security report, involved 427 developers at the Devoxx conference.

Survey Findings on Security Preferences

According to the survey, 48 percent of developers expressed a preference for using pre-hardened container images. This choice reflects a broader concern regarding security, as nearly one in four respondents reported experiencing container-related security incidents within the past year. The primary factor influencing their choice of base container images was security, cited by 29 percent of participants, followed by performance at 21 percent and image size at 17 percent.

Challenges in Container Security Management

Despite the emphasis on security, many developers still rely on general-purpose Linux distributions and JDKs, with 55 percent and 69 percent respectively using these options. BellSoft argues that such software often includes unnecessary packages, complicating the security and optimization processes. Furthermore, the survey identified that 62 percent of container security mistakes stemmed from human error, alongside challenges like patching difficulties and false positives from scanning tools.

Approaches to Mitigating Security Risks

Developers are employing various strategies to enhance container security. The most common methods include using trusted container registries (45 percent), vulnerability scanning (43 percent), and generating software bill-of-materials (SBOM) (18 percent). However, 10 percent of respondents indicated that their organizations did not implement any additional security measures beyond standard tools.

Implications of the Findings

BellSoft’s CEO, Alex Belokrylov, noted that the survey results highlight a consistent desire among teams for security, efficiency, and simplicity. He advocates for the adoption of hardened images, suggesting that this approach can alleviate the burden of security management from developers to the image vendors, thereby reducing maintenance and cost pressures. These findings emerge in a landscape where AI tools are becoming increasingly prevalent, although their impact on security practices was not directly addressed in this year’s survey.

This article was produced by NeonPulse.today using human and AI-assisted editorial processes, based on publicly available information. Content may be edited for clarity and style.