Vulnerability Security Assessment Survey

JavaScript isn't enabled in your browser, so this file can't be opened. Enable and reload.

This survey should take you approximately 10 minutes and is to identify how to best enhance our security solution for you and the open source community.

If you would like to be entered in a $50 gift card drawing, please provide your email at the end of the survey.

Do you use or are you planning to use docker containers to deploy software for your products? *

Yes

Maybe

What languages does your team currently use or are considering adding to your products? Select all that apply.
*

Python

Java

JavaScript

Swift

C++

Golang (Go)

HTML

CSS

N/A

Other:

Required

Of the security tools you currently have in place, what do you use it for? Select all that apply.
*

Auto generate SBOMs

Manually build custom SBOMs

Share and distribute SBOMs

Monitor CVE severity and status

Receive early notifications of CVEs that affect your products

Filter CVEs by CVSS score or attack vector

Produce CVE reports to share with the team

Remediation and fixing security risks

Re-using triaging information across teams and products

Centralizing security information using unified vulnerability management dashboard

Other:

Required

If you use your vulnerability support system to generate SBOMs, what format do you prefer to use?
*

Custom

SPDX

CycloneDX

Other:

How important is it for your vulnerability support to have a risk analysis score for your CVEs or SBOMs?
*

Not at all important

Extremely important

Is your SBOM tool being integrated into your CI/CT pipeline?
*

Yes

Maybe

How effective do you think your vulnerability management is for your products?
*

Not at all effective

Extremely effective

Which of the following tools do you use for SBOM/vulnerability management? Select all that apply.
*

Vigiles

Veracode

Snyk

Open-source tool integrated into the system (ex: Yocto Builder)

Mend (previously: WhiteSource)

Black Duck

Other:

Required

What’s a roadblock that you find yourself or your team encountering when it comes to securing your products and devices? Select all that apply.
*

Lack of resources

Not enough knowledge or expertise

Time

Lack of budget

Lack of tools

Other:

Required

What is a feature you find important that your vulnerability support system does not currently have?

Do you want to be included in the drawing of a $50 gift card? If so, please enter your email address below:

Submit

Clear form

Never submit passwords through Google Forms.

This form was created inside of Timesys. Report Abuse

Forms