The Global Market for Software Composition Analysis 2021 to 2026: The Dangers of Third-Party Software Usher in a New Era for SCA

Table of Contents

Executive Summary

• Key Findings

Global Market Overview

• Recent Developments
• US Executive Order 14028 & SBOMs
• Log4j Vulnerability

Comparative Forecast by Region

• Americas
• Europe, Middle East, Africa (EMEA)
• Asia-Pacific (APAC)

Comparative Forecast by Vertical Markets

• Enterprise/IT
• IoT/Embedded

Competitive Landscape

• JFrog
• GrammaTech
• Mend (WhiteSource)
• Revenera (Flexera)
• Snyk
• Sonatype
• Synopsys

End User Insights

• The Combined Power of SCA & Static Analysis
• Security, An Organizational Evolution
• The Rise of Platform Solutions

About VDC Research

Report Exhibits

• Exhibit 1A: Global Revenue of Software Composition Analysis Tools & Related Services, by Customer Type
• Exhibit 1B: Global Revenue Share of Software Composition Analysis Tools & Related Services, by Customer Type
• Exhibit 2: Global Revenue of Software Composition Analysis Tools & Related Services, by Geographic Region
• Exhibit 3: Revenue of Software Composition Analysis Tools & Related Services, Americas, by Customer Type
• Exhibit 4: Revenue of Software Composition Analysis Tools & Related Services, EMEA, by Customer Type
• Exhibit 5: Revenue of Software Composition Analysis Tools & Related Services, APAC, by Customer Type
• Exhibit 6: Global Revenue of IoT/Embedded Software/System Software Composition Analysis Tools & Related Services, by Vertical Market
• Exhibit 7: Global Revenue of Enterprise/IT Software Composition Analysis Tools, by Leading Vendors
• Exhibit 8: Global Revenue of IoT/Embedded Software Composition Analysis Tools, by Leading Vendors
• Exhibit 9: Percentage of Total Software Code in Final Design, by Source
• Exhibit 10: Usage of Software Composition Analysis (SCA)/IP Compliance Tools in Current Project, by Usage of Static Analysis or SAST Tools
• Exhibit 11: Importance of Security to Current Project, by Agile and DevOps Adoption
• Exhibit 12: Actions Respondent's Organization Has Taken in Response to Security Requirements, by Agile and DevOps Adoption
• Exhibit 13: Types of Tools Used in Current Project, by SCA Usage

Excel Exhibits

Survey Results

• Exhibit 1: Primary Country of Residence
• Exhibit 2: Type of Most Current or Recent Project
• Exhibit 3: Personally Involved with Engineering of Embedded Technology
• Exhibit 4: Type of Purchase by Respondent's Organization
• Exhibit 5: Primary Industry Classification of Project
• Exhibit 6: Type of Aerospace & Defense Application for Most Recent Project
• Exhibit 7: Type of Automotive In-Vehicle Application for Most Recent Project
• Exhibit 8: Type of Communications & Networking Application for Most Recent Project
• Exhibit 9: Type of Consumer Electronics Application for Most Recent Project
• Exhibit 10: Type of Digital Security Application for Most Recent Project
• Exhibit 11: Type of Digital Signage Application for Most Recent Project
• Exhibit 12: Type of Energy and Utilities Application for Most Recent Project
• Exhibit 13: Type of Gaming Application for Most Recent Project
• Exhibit 14: Type of Industrial Automation Application for Most Recent Project
• Exhibit 15: Type of Media & Broadcasting Application for Most Recent Project
• Exhibit 16: Type of Medical Device Application for Most Current Project
• Exhibit 17: Type of Mobile Phone
• Exhibit 18: Type of Office/Business Automation Application for Most Recent Project
• Exhibit 19: Type of Transportation Application for Most Recent Project
• Exhibit 20: Type of Retail Automation Application for Most Recent Project
• Exhibit 21: Type of Non-Manufacturing/Services Application for Most Recent Project
• Exhibit 22: Certification/Approval Standards Required for Current Project
• Exhibit 23: Highest Design/Development Assurance Levels (DAL) Required for Project Software (Aerospace)
• Exhibit 24: Highest Software Integrity Levels (SIL) Certification Required for Project Software
• Exhibit 25: Highest Automotive Software Integrity Levels for Project Software
• Exhibit 26: Capabilities/Features of Current Project
• Exhibit 27: Capabilities/Features Expected in a Project Three Years From Now
• Exhibit 28: Type of Real-Time Deadlines for Current Project
• Exhibit 29: Application's Shortest Response Deadline to a Time-Critical Input or Event
• Exhibit 30: Estimated Length for Current Project (In Months)
• Exhibit 31: Current Project's Schedule
• Exhibit 32: Estimated Number of Years Current Project will be Manufactured Once Complete
• Exhibit 33: Estimated Number of Years of Useful Life for Product Once Deployed
• Exhibit 34: Attributions of Delays to Project
• Exhibit 35: Engineering Tasks Personally Involved
• Exhibit 36: Estimated Percent of Time Spent on Engineering Tasks
• Exhibit 37: Does Organization Have Formal Policies and Procedures for Testing the Security of IoT Devices?
• Exhibit 38: Personnel Testing the Security of IoT Devices
• Exhibit 39: Estimated Number of Full-Time Staff on Current Project
• Exhibit 40: Engineering and Development Work Outsourced to Third-Party Engineering Services
• Exhibit 41: Percent of Entire Engineering/Development Effort in Each Task that was Outsourced for Current Project
• Exhibit 42: Estimate of Number of Full-Time Engineers or Developers Employed by Organization
• Exhibit 43: Estimated Percent of Organization's Full-Time Engineers/Developers Working in Specific Roles
• Exhibit 44: Estimated Total Cost of Development for Current Project
• Exhibit 45: Estimated Bill of Materials for Current Project
• Exhibit 46: Estimated Units to be Shipped Per Year of Current Project