Reports

Reports


State of Software Security Report Volume 5
 Veracode State of Software Security Report Volume 5

Veracode’s State of Software Security Report Volume 5 enumerates application security statistics and trends in identified software vulnerabilities, policy compliance, and remediation efforts. After reading this report, it should be no surprise why the number of reported data breaches is at an all-time high. Our key findings are accompanied by predictions for the next 12 to 18 months, where we sketch out the possible future if the status quo continues.

Volume 5 (40 Pages)
April 8th, 2013

Download Volume 5 of the Report

 
State of Software Security Report – Feature Supplement on Software Supply Chain
 Veracode State of Software Security - Enterprise Testing of Software Supply Chain

This featured supplement focuses on the state of enterprise programs that assess the security of software purchased from vendors. Veracode can uniquely report on how program practices evolve because our analysis is based on data aggregated from companies as they test real applications. The data represents intelligence gleaned from over 900 application builds submitted by software vendors to Veracode’s cloud-based platform in an 18 month time-frame.

Download the Feature Supplement on Enterprise Testing of Software Supply Chain

 
Veracode State of Software Security Report – Feature Supplement on Public Companies
 Veracode State of Software Security Volume 4

Veracode has been publishing a semi-annual State of Software Security (SOSS) report since 2010. Over time we have received significant interest in our findings and numerous requests to investigate the dataset from many different perspectives that may not be routinely covered in our semi-annual reports. To satisfy the curiosity of our readers and to allow us to extend our investigation to topical areas, we are moving to a new reporting format in 2012. This year we are publishing shorter feature supplements that are designed to address a particular, focused topic, and only release the full SOSS report once a year. This report is the first feature supplement for 2012.

Download the Feature Supplement on Public Companies

 
Veracode State of Software Security Volume 4 Executive Summary
 
State of Software Security Report Volume 4
 Veracode State of Software Security Volume 4

Veracode’s State of Software Security is the first report of its kind to provide security intelligence derived from multiple testing methodologies (static, dynamic, and manual) on the full spectrum of application types (components, shared libraries, web, and non-web applications) and programming languages (including Java, C/C++, and .NET) from every part of the software supply chain on which  organizations depend.  It represents intelligence gleaned from analyzing billions of lines of code submitted to Veracode for independent verification of software security from more than 15 industries.

Volume 4 (60 Pages)
December 7th, 2011

Download Volume 4 of the Report

 
State of Software Security Report Volume 3
 Veracode State of Software Security Volume 3

Veracode’s third State of Software Security report gleaned from analyzing billions of lines of code submitted to Veracode.

Volume 3 (50 Pages)
April 19, 2011

Download Volume 3 of the Report

 
Veracode State of Software Security Volume 3 Executive Summary
 
State of Software Security Report Volume 2
 Veracode State of Software Security Volume 2

Veracode’s second State of Software Security report gleaned from analyzing billions of lines of code submitted to Veracode.

Volume 2 (36 Pages)
September 22nd, 2010

Click to read Volume 2 of the Report

 
Veracode State of Software Security Volume 2 Executive Summary
 
State of Software Security Report Volume 1
 Veracode State of Software Security Volume 1

Veracode’s very first State of Software Security report gleaned from analyzing billions of lines of code submitted to Veracode.

Volume 1 (32 Pages)
March 1st, 2010

Click to read Volume 1 of the Report

 
Veracode State of Software Security Volume 1 Executive Summary