Container security continues to confound many organizations despite the increasing use of those platforms across cloud deployments, according to a new report put together by container security provider StackRox.

The report, which includes comments from 392 IT workers, found that while two-thirds of organizations are running more than 10% of their applications in a containerized environment, 40% of those organizations think their current security stance is not adequate to protect those environments.

Most of those concerns are over misconfigurations and accidental exposure of access to their containerized environments. However, a robust 43% stated concerns over runtime security, 35% specified concerns about deployment security, and 22% said they were worried about build security.

“Just as with securing [infrastructure-as-a-service], missing container and Kubernetes security best practices and human error in misconfigurations create real threats to organizations and their bottom lines,” said Mark Bouchard, co-founder and CEO of AimPoint Group, in a statement on the report. “The consequences of overlooking security early in the container life cycle will be steep, both in lost time and money and in risk of exploitation.”

The report also found that around two-thirds of IT workers surveyed linked their organization’s DevOps and DevSecOps groups as being primarily responsible for operationalizing container security.

Those security concerns come on the heels of a rash of recent vulnerabilities discovered within several container platforms.

Kenna Security recently found that the most popular Docker container files contain at least one notable security vulnerability, while one in five houses what is considered a critical security flaw. And earlier this year a senior software engineer at SUSE discovered a significant Docker container security flaw that allowed an attacker access to API endpoints behind the docker cp command that would allow an attacker to read and write data on a host machine.

The use of the Kubernetes container orchestration platform also continues to grow unabated with 86% of those surveyed saying their organization uses the platform compared to 57% just six months ago. Nearly half continue to self-host their Kubernetes deployments, while 27% run theirs through Amazon Web Services’ (AWS’) EKS, 16% through Microsoft’s Azure AKS, and 12% run theirs on Google’s GKE and IBM Red Hat OpenShift.

Much of that self-hosting is also happening in hybrid environments with 70% of respondents stating that they are running their containers in house and 53% of those also using a public cloud environment. The number of users relying exclusively on their own on-premises environments plunged from 31% six months ago to just 17% in the latest survey.

AWS also remained the most prolific public-cloud location for running containers, with 78% of those surveyed saying they were using that cloud vendor. Microsoft’s Azure remained a strong No. 2, but the report found GCP use surged from 18% six months ago to 28% in the latest survey.

UPDATE: Story clarified to note that StackRox conducted the survey and that AimGroup only provided a comment on the report.