Each year we publish a series of cuts of the data specific to verticals or geographic regions as companion research to the State of Software Security (SoSS). These cuts allow us to narrow the lens slightly and explore where we are, how we got there, and how we could do things better. It also provides an excellent chance to tease out relevant trends that get somewhat buried in the aggregate data view of the main report.

This search for the signal also lets us baseline performance against peers in other geographies and yields an aggregate view.

​

Within this report we refer to a horizontal based view of organizations in Europe, Middle East, and Africa or EMEA. This means that by its nature the view is essentially an average of all industry verticals and all countries, which introduces some forcing. However, given the sample size of applications and organizations that produce them, we were thankfully only left with a few curious question marks in the data, which we will call out when we get to them.