Veracode：2025年度全球软件安全状况报告：成熟度新视角（英文版）.pdfVIP

2025STATEOF

ANEWVIEWOFMATURITY

2025STATEOFSOFTWARESECURITY:ANEWVIEWOFMATURITY

Contents

0319

OpeningLetterComparingSoftwareSecurity

ProgramPerformance

FlawPrevalence

FixCapacity

04FixSpeed

DebtPrevalence

ExecutiveSummaryOpen-SourceDebt

KeyFindings

0731

15YearsofSpecialSoSSConclusionsRecommendations

0934

StateofSoftwareSecurityMethodology

in2025

FindingFlaws

FixingFlaws

FightingDebt

2

2025STATEOFSOFTWARESECURITY:ANEWVIEWOFMATURITY

Opening

letter

Ourresearchdrivesourownsoftwaresecuritymeasures,andthisyear,inour15thvolumeof

thisreport,weseektodiscovertrendsaboutwherethemostriskresidesandwhatmetrics

canbeusedtogaugeprogressagainstit.Plus,wewanttocompareprogramperformanceof

leadingandlaggingorganizationsusingthesemetrics.Thegapsbetweenthetop25%and

bottom25%arefascinating.

Ultimately,realizingprogressandmaturityinsoftwaresecurityrequiresarisk-based

perspective.Ittakesfocusingont