About 56% believe Software Composition Analysis (SCA) tools are noisy and delay development teams.

73% of SCA users lack visibility into whether flagged vulnerabilities are exploitable in production.