Skip to content
October 26, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Technology
  • GitLab 2018 Global Developer Report: Open Source is Still the Mainstream
  • Technology

GitLab 2018 Global Developer Report: Open Source is Still the Mainstream

Do Son March 25, 2018 5 minutes read
GitLab 2018 Global Developer
Add Daily CyberSecurity as a preferred source on Google

Recently, GitLab released a global developer report, which surveyed a total of 5296 software professionals from around the world. Most of them are software developers or engineers working in hardware, services, small business and SaaS industries.

 

The specific situation of the interviewed personnel

In this survey, 43.52% of the respondents served in the hardware, services, and SaaS industries, government, aerospace and defense, automotive, consumer goods manufacturing, energy and utilities, industrial manufacturing, biotechnology/pharmacy, insurance, food, and The proportion of other industries, such as health, is less than 8%. The status of other respondents is as follows:

 

Most of the respondents were in SMEs, and 74.63% of respondents had less than 100 company developers. The specific situation is as follows:

 

Among them, 61.64% of software developers or engineers are web developers. The proportion of machine learning developers, graphics programming, DBA, and graphic designers is less than 1%. Other occupations are as follows:

 

The main findings of the Global Developer Report:

The GitLab Global Developer Survey lasted for one month. From feedback from more than 5,000 respondents, we found that software developers basically agreed with the value of highly collaborative work and experienced benefits from it. GitLab summed up six main findings from the survey:

1. Corporate leaders tend to be more optimistic about team overall satisfaction, productivity, and open source tools.

2. Almost everyone (81%) agrees with the importance of a collaborative environment, but the visibility and transparency of collaboration still lags behind, with 42% of developers saying that the report is not clear is the biggest challenge in the work.

3. Companies that have adopted DevOps are more likely to deploy on-demand and prioritize automated agility.

4. Efficient teams use better tools, spend less time on context switching, and are more likely to work remotely and efficiently.

5. On the whole, the team working remotely is more satisfied with the office than the office team. It mainly shows a higher level of visibility, a better deployment process, and a more powerful DevOps culture.

6. The 2018 IT leaders will invest in the following areas, including continuous integration, delivery, and deployment.

The current opportunities and challenges for enterprises

GitLab investigates the culture, workflow, and tool status of IT companies and tries to find out the differences between developers and IT managers. GitLab also studied the cultural differences between remote teams and office teams.

The study found that developers and senior management personnel maintain a high degree of cultural consistency, and both parties attach great importance to collaboration and communication. Management maintains a more optimistic attitude towards implementing DevOps, and 81% of managers agree with the view that 65% of developers agree. However, there are some cognitive differences in the frequency of code deployment, with 47% of managers saying that they will deploy code on demand or multiple times a day, compared with only 39% of developers.

Most managers stated that they will spend less than $10,000 in annual technical support in 2018.

 

Continuous integration, automation, and open source will be the most anticipated in 2018

47% of respondents believe that continuous integration will ease the obstacles encountered in the development process, and tool selection, tool integration, and internal processes are three major issues facing companies. Therefore, continuous integration, delivery, and deployment have tremendous application power for enterprises.

Compared with the office team, the overall satisfaction and productivity of the remote team are higher, and the automation of the software development lifecycle is a high priority for the enterprise.

 

Emphasizing and prioritizing the use of open source tools is a common idea in all market segments. Regardless of level, culture, and workflow, open source is extremely important to the development team. In this survey, 92% of respondents stated that open source tools are Innovation is very important, 75% of respondents said that using open source tools is very important to them, and 84% of respondents said they prefer to use open source software through the closed source or proprietary tools. Compared with closed source software, open source tools can provide a variety of benefits, such as more secure, improve the overall software quality and simplify the development process.

What tools do developers prefer?

As the technological environment continues to change and tools are selected more and more, choosing, implementing, and integrating the right tools becomes a major challenge. In this, open-source tools have received the warmest welcome from developers and are more suitable for security, innovation, and smooth development processes.

The survey shows that most developers use 3 to 6 tools to complete the development process, and one-third of respondents said they use cloud tools less than 19% of the time. However, interestingly, 27% of respondents said that they are using cloud tools from 80% to 100% of the time, and the two sides are evenly matched. More than half of respondents said they would spend about 40% of their time integrating tools, and some respondents said they spent less than 19% of their time. In addition, in daily work, 55% of the time is spent switching context between tools.

The report also gives the top three most important tools for the Agile team and the DevOps team. Let’s take a look together.

 

Source, Image: gitlab

Related coverage

  • Pragmatic Refinement: Apple Rebalances Aesthetics and Performance at WWDC 2026
  • The $134 Billion Gambit: Musk Sues OpenAI While California Crackdown Hits xAI
  • Red Hat & AMD Deepen AI Partnership: Optimizing AI and Virtualization
  • The End of Annoying Cookie Banners? The EU Is Finally Considering a New Law
  • Google quietly develops Fuchsia as a successor to Android
  • The Digital Fortress Falls: Why Russia Blocked Archive.today and Wikipedia Severed Its Links
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: GitLab 2018 Global Developer

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 26, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 26, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 26, 2026
  • CVE-2026-106173CVSS 9.8
    A improper limitation of a pathname to a restricted directory (\'path traversal\') vulnerability in Fortinet FortiSIEM 7.5.0 may...
    Admin intel📅 Updated: Oct 25, 2026
  • CVE-2014-125133CVSS 8.7
    NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2015-20128CVSS 8.8
    FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2016-20104CVSS 8.7
    EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2026-110447CVSS 9.2
    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
    CISA KEV📅 Added to KEV: Oct 23, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-45083CVSS 9.8
    The Goobi viewer is a web application that allows digitised material to be displayed in a web browser....
    📅 Updated: Oct 26, 2026
  • CVE-2026-47323CVSS 9.8
    Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy in...
    📅 Updated: Oct 26, 2026
  • CVE-2026-42731CVSS 9.8
    Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification:...
    📅 Updated: Oct 26, 2026
  • CVE-2026-32999CVSS 9.0
    Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute...
    📅 Updated: Oct 26, 2026
  • CVE-2026-46907CVSS 9.9
    Vulnerability in the JD Edwards EnterpriseOne Order Promising product of Oracle JD Edwards (component: Order Promising Integration). The...
    📅 Updated: Oct 26, 2026
  • CVE-2026-46908CVSS 9.9
    Vulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle JD Edwards (component: Accounts Payable). The supported...
    📅 Updated: Oct 26, 2026
  • CVE-2026-46909CVSS 9.8
    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions...
    📅 Updated: Oct 26, 2026
  • CVE-2026-46910CVSS 9.1
    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions...
    📅 Updated: Oct 26, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.