Formal software testing programs are lacking at many enterprises, but the trend is moving in the right direction, according to application security vendor Veracode, which conducted an analysis of software submitted to its code scanning platform.