AI Security Survey

Welcome to the survey!

A collaboration among OpenSSF, LF AI & Data, and ActiveState.

GOALS:
This survey examines the state of AI security in open source software (OSS) development, exploring how the rise of generative AI is reshaping threat landscapes, development workflows, and the security responsibilities of those who use, build, and maintain OSS. Respondents can expect questions spanning current AI security practices and preparedness, the new challenges and risks introduced by AI, and the opportunities AI presents for improving security outcomes. The findings will inform guidance, tooling priorities, and community resources that help the OSS ecosystem navigate AI security challenges more effectively.

INSTRUCTIONS:
- Target audience: Technical practitioners directly responsible for or involved in OSS security (including maintainers, contributors, security professionals, and technical leaders)
- Time required: About 15 to 20 minutes
- Language: Survey language options can be found at the top-right corner of the page

VISIBILITY:
We will summarize the survey data and findings in a report that will be published on the Linux Foundation website. The dataset for this survey and instructions for its use will be posted and made publicly available in the Linux Foundation's section of Data.World.

BONUS:
As a thank you for participating in this research, once you have completed the survey, a discount code will be displayed on the confirmation page that can be used for any Linux Foundation e-learning training course or certification exam, as long as you register for a course before December 31st, 2026. This discount code is not valid for any combination of FinOps or instructor-led training courses or certifications. You can find the complete catalog of training and certifications at https://training.linuxfoundation.org/full-catalog/

PRIVACY:
We do not collect or store any information identifying you or your employer as part of your survey responses. If you optionally provide your email address at the end of this survey, it will be maintained separately from your survey responses. The Linux Foundation’s Privacy Policy is available at https://www.linuxfoundation.org/privacy.