Organizations should be cautious about the security practices of low-code/no-code platforms, as many are hosted and may not provide clear insights into their security controls. Users often receive generic security attestations, and the platforms may lack robust static and dynamic code scanning, leading to potential vulnerabilities in the applications developed.

Low-code/no-code platforms can enhance security by ensuring timely updates to packages and libraries, which helps mitigate risks from vulnerabilities. Additionally, reputable providers may offer secure hosting environments with sound service-level agreements, reducing overall risk for deployments. They can also enable non-technical users to create applications that support security operations, such as automation playbooks.

Organizations with limited development and security expertise may find low-code/no-code platforms beneficial for quickly deploying applications. These platforms can serve as a viable option for creating prototypes or custom security scripts, especially for teams that lack coding experience but need to address specific security functions or automate processes.