Rust programming language adoption accelerates in Australian enterprise systems

Rust programming language adoption is accelerating in Australian enterprise systems, with financial services and infrastructure companies replacing C and C++ components to eliminate memory safety vulnerabilities. The shift is driven by the increasing cost of security breaches and the growing recognition that memory safety bugs in systems programming languages are a systemic risk that cannot be managed through patching alone. Commonwealth Bank has publicly confirmed that it is migrating internal network services from C to Rust, with the bank citing a reduction in critical security vulnerabilities as the primary motivation for the transition.

The Rust programming language guarantees memory safety without garbage collection, which means it eliminates entire categories of vulnerability including buffer overflows, use-after-free errors, and null pointer dereferences that are common in C and C++ codebases. Those vulnerabilities are the root cause of a significant fraction of critical security incidents reported by the Australian Cyber Security Centre, and they are difficult to detect through conventional testing because they often manifest only under unusual input conditions. Rust's compile-time memory safety checks catch those errors before code reaches production, which is a security advantage that cannot be replicated through testing or code review alone.

Financial services migration patterns

Commonwealth Bank's Rust migration is part of a broader pattern in Australian financial services, where memory safety vulnerabilities in payment processing, trading, and risk management systems have direct financial and reputational consequences. The bank's technology team reported that the Rust components of its payment processing stack have not required emergency patches for memory safety vulnerabilities since deployment, compared with the previous C implementation that required multiple critical patches per year. The reliability improvement is particularly valuable in payment processing, where system downtime or incorrect transaction handling triggers regulatory reporting obligations and customer compensation liabilities.

Westpac and ANZ are also evaluating Rust for new systems development, with both banks including Rust in their technology radar for infrastructure components that require high performance and high reliability. The evaluation is driven by internal security teams rather than application development teams, which reflects the fact that Rust's primary advantage is security rather than developer productivity. The language has a steeper learning curve than Python or JavaScript, and the compile times for large codebases can be longer than for interpreted languages. Those characteristics make Rust a specialist tool rather than a general-purpose replacement, and the adoption pattern is concentrated in systems programming domains where correctness is more important than development speed.

Government and open source ecosystem support

The Linux Foundation has launched a Rust for Linux initiative that is integrating Rust support into the Linux kernel, with the goal of allowing new kernel modules to be written in Rust rather than C. The initiative has implications for Australian enterprises that run Linux infrastructure, because kernel modules written in Rust will be eligible for the same memory safety guarantees that application code written in Rust receives. The Rust for Linux effort is still in early stages, but it has gained support from major technology companies including Google, Microsoft, and Amazon, which suggests that Rust will become a standard option for kernel development over the next five years.

The Australian Government's Digital Transformation Agency has included Rust in its recommended technology stack for new systems development, citing the security advantages and the alignment with the government's secure-by-design principles. The recommendation is not mandatory, but it influences procurement decisions for government technology contracts, and vendors that can demonstrate Rust expertise have a competitive advantage in tenders for infrastructure and security-critical systems. The government's adoption of Rust is also creating a pool of Australian developers with Rust experience who can move between public and private sector roles, which helps to address the talent shortage that is currently slowing enterprise adoption.

Tooling and developer experience improvements

The Rust ecosystem has matured significantly in the past two years, with improvements in compile times, IDE support, and library availability that reduce the friction of adopting the language in enterprise environments. The Rust Analyzer project has delivered stable language server support for Visual Studio Code, IntelliJ, and other development environments, which means developers can use the same productivity tools they are accustomed to when working with Rust. The crate registry has grown to over 100,000 packages, covering most of the libraries that enterprises need for web services, data processing, and systems integration.

The developer experience improvements are reducing the training cost of Rust adoption, but they do not eliminate it entirely. Enterprises that are migrating existing C or C++ codebases to Rust need engineers who understand both the source and target languages, and the migration process requires careful planning to avoid introducing new bugs during the transition. The Rust community has developed tools and methodologies for incremental migration, including the ability to call C code from Rust and vice versa, which allows enterprises to migrate one module at a time rather than rewriting entire systems in a single project. The incremental approach reduces risk and makes Rust adoption feasible for large, complex codebases that cannot be rewritten from scratch. Explore more enterprise software analysis at the Tech & Ideas hub

For the Rust programming language official documentation, see Rust. The Rust for Linux initiative is published at Rust for Linux. Commonwealth Bank's technology publications are at CommBank technology.