Hey community, I’m trying to research the use of open-source in the security space (especially for securing SDLC) and figured this would be a good place to start.

I have a few questions on top of that: 1. Do you use open source in your company and what is your process for approving an open-source solution? 2. Does your company secure its SDLC (software development life cycle)? 3. What tools do you use to keep your SDLC secure? 4. In your opinion, what are the biggest pros and cons of using open-source tools in cybersecurity?

Thank you so much!