Skip to main content

The State of Open Source Security Survey

Written by
The State of Open Source Security FEATURE

November 6, 2018

0 mins read

We’re excited to launch the second edition of our State of Open Source Security Survey! The goal of this survey is to provide a global view of our industry's security health. Once we get all of your wonderful responses we’re going to turn them into a beautiful report that you can read, print out, give to friends and family... you can do whatever you like with it.

Take the Survey NOW!

We’re looking to answer questions such as:

  • How do open source maintainers rate their security knowledge out of 10?

  • Who should own the security responsibility of the your application/library/framework?

  • How do open source maintainers find out about vulnerabilities in their code?

  • How do you track which open source libraries you use?

  • What drives you to upgrade a library?

  • How quickly do you typically respond to a high or critical severity vulnerability?

The survey won’t take long to fill out and once you’ve done that, you can optionally provide your name and email and we’ll personally send you a beautiful PDF that will give you all the results in a smart report.

As well as filling out the survey, we’d love your help to get this report out to the millions of developers out there that want to now more about security. Feel free to retweet this tweet here if you don’t want to create your own!

We've released our State of Open Source Security Survey - https://t.co/QawKKI4z52

Please fill out and RT, so we can create another great report showing the security landscape in our ecosystem.— Snyk (@snyksec) November 6, 2018

Take the Survey NOW!

Get started in capture the flag

Learn how to solve capture the flag challenges by watching our virtual 101 workshop on demand.

Read more

blog feature ai lilac
Blog

Turn Your Vulnerability Backlog Into Pull Requests With Agentic Remediation

The Evo Remediation Agent is now in Open Preview, bringing automated dependency resolution to Evo Agentic AppSec. AppSec teams can now run ongoing remediation

illustration hero ai
Blog

PHP Patches Two Critical Unauthenticated RCEs (CVE-2026-109618, CVE-2026-109619): Update Now

Two critical flaws in PHP’s request lifecycle can enable unauthenticated remote code execution. Upgrade to a fixed release or install a vendor backport for older versions.

AI Background min crop
Blog

AI Is Calling In Every Risk You've Accepted: Seven Insights From The AI Security Panel: Unfiltered

AI is making attacks cheaper and faster, exposing risks organizations already carry. Four security leaders share why machine-speed defense and faster remediation are now essential.