These days, there’s an app for virtually anything. Enabling rapid application development and deployment of these apps is a nearendless body of components, most of which are opensource: code, scripts, artifacts and more. But while these components are driving faster development and deployment, they also can be a security nightmare for companies that fail to manage and secure them effectively—a scenario that has proven catastrophic in several high-profile incidents over the last few years.

We conducted a survey of more than 400 organizations to understand their policies,processes and tools in managing the risk associated with the use of open source components in their applications.