Open-source technology has rapidly gained traction and popularity across various industries in recent years. As businesses and organizations seek to cut costs and increase flexibility, many have turned to open-source solutions for their software and technology needs. From popular operating systems like Linux, to open-source databases like MySQL, to programming languages like Python and Java, open-source technology is now widely used and trusted by companies and developers alike.
In GitHub's Octoverse 2025, a new developer joins every second as AI drives TypeScript to #1. Adoption remains dominant, with >90% of companies using open-source software per ongoing surveys.
We asked Christopher Howard, Lead Open-Source Program Manager, to share his valuable experience, insights and opinions about the state of open-source, types of open source, its benefits and challenges.
Why Is Open Source Becoming So Popular?
Open source provides access to excellent code bases, excellent solutions and products that have been collaborated on and innovated on a global scale, and that's a real benefit to an organization that doesn't have that skill in-house. They're able to use those solutions generally for free. Also, engineering companies are able to customize, enhance or build extra features to make open-source solutions really fit for purpose for those organizations.
Is Open Source a Business Model?
A lot of people in the industry think that open source isn't a business model, that it's the proprietary software on top, which happens to have an open-source brother or sister. Typically, there are community and public or free editions of the software. At EPAM, we have a great example of a time series database software called TimeBase. There is a community edition, but on top of that, there's the TimeBase enterprise edition. It generally has the same code base, but some of the connectors to other services or some of the functionality that enables it to be executed at scale in public, for example, have been restricted. So there are those kinds of commercial models on top of it.
What Industries Are You Seeing More Engagement From?
Pretty much all enterprises and industries are using open source. But what we are seeing in the last few years is two changes in the types of organizations.
-
Financial Services. That's being driven out by the need to standardize data, and the need to bring together some of these rather large global banking and financial organizations to collaborate and work in a way that enables the free flow of open data at scale across those organizations. And we're seeing increasingly more and more engagement around building data models, frameworks and mechanisms to share that data, particularly around trading crypto.
-
Energy and Sustainability. Open source is an enabler for sustainable objectives in business. It's closely related to many of the organizations trying to reach net-zero 2050 carbon targets. Open source helps adopt green software practices. And yes, that might apply to all industries, but it's particularly visible within the energy industry. The electric vehicle charging and lots of sustainable investment portfolios leverage open source in a really positive manner, versus building bespoke or one-time solutions for their problems.
Is Open Source Popular in Data-Security-Sensitive Industries?
Open source is an attractive offering for highly secure industries because it's very difficult, a bit like the blockchain, to hide or do things fraudulently or in a negative sense. The fact that the code base is in the open, the fact that any engineer can look at that code, understand how it's working, and where the various artifacts or pieces of data are flowing around, makes open-source software more secure than a single vendor creating a solution.
Are There Specific Types of Companies That Use Open-Source Software as Solutions for Their Business Needs?
Most companies today use technology for their operations. And most of the large enterprise solutions are, in one way or another, using open source. That might be a library or dependency, or it might well be something that's built into a core piece of functionality that they have, but generally, most solutions will have open-source dependencies built into them.
There was an initiative a few years ago, and we scanned some of the most popular applications and assessed all the open-source dependencies that they relied upon. And it was a vast number. A very common case is that organizations don't realize they're consuming open source until someone goes in and tells them — this is the case, you are using it.
Check the glove box in your car — you might be driving around with an open-source license printed in the instruction book.
Some cars, for example, Mercedes and Audi, have an open source within their SatNav systems, dashboards or computer screens. Because of open-source licenses and the requirements to always ship the license with the code, when you buy that car, you have a printed paper open-source license in the glove box in the front. So, without even realizing it, probably most people are driving around with open source software, not only in their car but also with a license printed out in the instruction book.
Is Open Source Free of Charge?
People's general perception, and it's not necessarily right or wrong, is that open source is free. The important point here is that open source is subject to an open-source license. That may well say that you can use this software for free, but it mandates a number of requirements upon the user in terms of copyright protections or not changing the code in a specific way, or even having to ask permission to publish it on the server, etc.
Open-source users can reach out to the maintainers and say, "I want to use it this way. Can it be made available under another license?" There's a fine line between something being open source and then becoming proprietary. But in terms of charging, typically, if it's going to be charged, then that would be regarded as a proprietary solution and not an open-source solution, irrespective of whether or not the code was exactly the same.
How Do Different Open-Source Licenses Change the Way You Can Use the Software?
Lots of the licenses allow users to do whatever they want to do with it. They can even use it in a commercial sense. But if you want to make it your own IP or your own proprietary solution, then you're restricted from doing so. And if you want to do that, then you have to reach out to the original software author and pay them a fee, and they will then provide you a relicensed version of that code. An open-source version may exist under an MIT or Apache license, a very permissive one, and if you wanted to make a commercial aspect of that, the original author might provide it to you under a different license. And the key part of that is that it has to be the original software author.
What Types of Open Source Exist?
Open source is not a single thing; organizations usually encounter it in several types that differ in how code is shared, governed and monetized.
1. Community Open Source (FOSS)
These are fully open projects managed by communities or foundations. All the features and source code are freely available and shared under licenses like MIT, Apache 2.0, BSD (permissive licenses) or GPL, AGPL, LGPL (copyleft licenses). Businesses often use these projects as building blocks for their work and sometimes make improvements or fix bugs that they share back with the community.
2. Enterprise Open Source
This is open source supported by vendors who provide polished versions with added services like security fixes, reliable builds, long-term support and customer help (e.g., enterprise Linux or commercial Kubernetes). Industries like finance and government prefer this model because it offers predictable support and ensures the software is safe and well-managed.
3. Open Core
This is a mix of open-source and commercial software. The main part of the software is open source, but special features, tools and advanced capabilities are sold under paid licenses. Vendors use this model to build a community around the open-source core while making money from premium add-ons like management tools, clustering or compliance features.
4. Source-Available / "Inner Source"
This type of software lets you see the code, but it's not fully open source. Sometimes it's shared only within a company or under strict rules, so you might not be allowed to freely distribute or change it. This model is often used for sensitive tools like security software or when companies want transparency without completely sharing everything.
5. Open Hardware and Open Data
This goes beyond software and covers designs for hardware (like phones, circuit boards or data center gear) or large datasets. These are shared under open licenses so others can study, change and build on them. Open hardware and data are especially important in fields like energy, sustainability and AI, helping boost innovation faster.
What's the Value That Enterprises See in Open-Source Solutions and Opt for Them Instead of Proprietary Software?
Open source provides diversity in terms of innovating and being at the forefront of the challenges that the industry faces. Enterprises should see open-source tools as innovative, forward-thinking and almost disruptive.
As a global audience collaborates on open-source software, it's diverse in its very nature. That means that you're getting a different voice, a different experience and different insights that you will never get within your own organization. You could be the most diverse organization in terms of having product designers, engineers and analysts all coming from different walks of life and different experiences, but you will still never have a kind of worldview or a world outlook on how a product should be built. Enterprises leverage open source by being able to bring those other voices to the table to help shape the direction of solutions and products.
If we take financial services as an example, there are so many differences in how banking systems work and function across the world. In the Netherlands, for example, there's a real focus on debit cards and cash. Credit cards are not necessarily used, whereas credit and debit cards are the norms in the UK, and cash is not used at all. So working in an open source space, you can bring together these voices without having to fly people all over the world to go to workshops, to say this solution wouldn't work here because of XYZ or our cultural differences. Enterprises take real advantage of that.
How Does Open Source Help Avoid Vendor Lock-In?
Open source prevents vendor lock-in because it removes the requirement to engage with one commercial organization to build and look after your technology stack. Instead of having to be obligated to work with a vendor for the rest of that solution's life cycle, there's open source, where you can change and rely upon external individuals to help that along.
Open source is seen as a really attractive way of reducing what we saw ten years ago in the IT sector, around multi-billion dollar contracts with a single vendor that locked in public sector organizations, for example. Open source is a disruptor to that. It's removing the obligation to work with one supplier and instead crowdsourcing ideas and innovation from a much wider pool. It doesn't remove the challenges related to customization and long-term support, but it does remove the notion of organizations having to call upon one vendor to build their solutions for them.
As a Vendor, Why Choose Open Source Instead of Proprietary Software?
When using open source, you are using a solution that has potentially tens of thousands of other people there to help your understanding, your implementation, but also the furthering and development of that solution.
When you download something online, and it doesn't quite work out, you give up and move on. In the open-source world, versus a single vendor or a single enterprise license, you've got tens of thousands of people ready to help with your problems, but also enhance that solution to help further problems down the line. So it's a really attractive offering in the sense that it's not just a solution, it's an entire community. There's a passion behind it, and many of the people involved in open source are really passionate about it for personal reasons. It's being a part of something much bigger than an off-the-shelf software offering.
Are There Any Barriers to Consuming Open-Source Software?
Organizations might be worried about bringing external code into their infrastructure. Typically, organizations will be reluctant to bring in code that they don't either fully understand or don't have full control over, and that potentially brings in security concerns and risks.
For example, financial services traditionally haven't been very good about adopting open source. They're concerned about the impact that could have on their existing infrastructure. Also, they don't necessarily want their own engineers to be contributing back to those solutions under their name because of the risk that is potentially associated with that.
Solution
There are many initiatives companies try to promote to clients around building gateways, safety checks and milestones to ensure contributions are done responsibly and with good governance.
What Are the Most Common Challenges Faced by Companies Utilizing Open-Source Solutions?
Challenge no. 1: "If something goes wrong, we can't fix it!"
The biggest challenge is that open source relies generally upon people volunteering their time and their expertise to build solutions and products. An organization might have an entire technology stack built on one open-source dependency, and when something goes wrong, until that's fixed by the maintainer or the project team, that becomes a blocker and a limitation. So that's the main objection decision-makers put when offered an open-source tool — it's not our solution, and our hands are tied.
Solution
Organizations are trying to build in feature-proofing and mechanisms around this. Some organizations have teams of engineers on call, ready to solve problems when open-source things go wrong.
Challenge no. 2: "Open source is not a perfect fit for any use case."
Companies trying to engage with open-source solutions will rarely find a solution that is 100% what they're looking for. It might have 80% of the functionality they are looking for, and they could probably use it out of the box. But, they will probably have to pay someone to engineer that additional 20% or build it themselves. It's a solution that's offered for free and does the job, but still requires icing the cake and putting all the extra bits on top to make it exactly what it needs to be.
Solution
Companies that have their own engineering teams can develop the missing features themselves. Others can hire an IT company to further customize the open-source tool to serve their needs.
Can Enterprise Open Source Serve as a Source of Technological Innovation in the Future?
Yes, I definitely think it can. Open source has forced organizations to work in the open, and by working in the open and showing what's in progress, you invite other opinions and other ideas and that creates further innovation and disruption to the industry. Open source is the only methodology that allows competitors and organizations to collaborate at scale on solutions, problems and ideas that solve problems for everybody.
Let's take sustainability as an example. Organizations are trying to become as carbon-zero as possible. They're trying to reduce their carbon footprint, but no one is doing that secretly. Everyone is collaborating in the open around solutions for the wider, global community as to how we can improve this. And I really believe that things like the climate crisis that we're facing, challenges around conflict or technology poverty are being addressed through open source and open data.
Open source is a hot topic. It's a high note now and lots of industry analyst companies such as Gartner, IDC and Forrester are still very much talking about open source.
What Is the Expected Future Change in the Use of Enterprise Open Source?
I expect to see the increased adoption of open source off the back of mandated government policies around things like Software Bill of Materials (SBOM). It's now mandatory in the US, and there's a similar one about to be rolled out in Europe.
SBOM outlines exactly the dependencies, the libraries and the code bases that make up the software. Open-source tools have this out in the open and readily available. On the other hand, enterprises that pay organizations to build bespoke solutions have to release that kind of additional level of governance on top. So enterprise adoption of open source is going to continue to increase. I think more industries as a whole, such as financial services, regulatory industries and life sciences, will continue to adopt it.
What Open Source Solutions Does EPAM Offer?
EPAM actively contributes to open source across testing, DevOps, UI/UX and life sciences. Healenium is our self-healing test automation tool for Selenium/Appium, using ML to auto-fix broken locators in runtime. KubeRocketCI is a Kubernetes-native CI/CD platform with Tekton/ArgoCD for progressive delivery. Ketcher is a high-performance chemical structure editor for cheminformatics and molecular design. MRI Viewer is our web-based medical imaging viewer for DICOM files with 3D rendering and annotations.
Explore all EPAM open source software products in EPAM SolutionsHub Open Source Catalog.
Open Source Beyond Software
When we talk about open source, we somehow naturally just talk about software, but there's a whole other domain around open hardware and open data as well. There's hardware around data centers, manufacturing industries and energy infrastructure. We've been exploring how open source can help the energy and the energy grid. Data is out in the open, and people are sharing data models and big data between government organizations, for example, and can leverage that for good. The power that opening up giant data tables and sets of data in a safe way can provide to improve livelihoods and the world as a whole is a really important area. So it's not just bound to software and solutions, it's a much bigger conversation.
FAQs
What is the difference between a permissive license and a copyleft license in open source projects?
Permissive licenses like MIT grant broad open source license grants with minimal restrictions, allowing use in commercial software while requiring only a copyright notice. Copyleft licenses like GPL mandate that modified versions be released under the same license, ensuring derivatives remain free and open to other users.
Should I use the MIT license or the Mozilla Public License for my software development project?
MIT offers maximum flexibility with few requirements beyond retaining the copyright notice, ideal for libraries integrated into proprietary code. Mozilla Public License (MPL) is file-level copyleft, requiring only modified licensed files to stay open source, better for projects balancing openness with commercial purposes.
How do open source license types affect patent rights and commercial software use?
Licenses like Apache 2.0 explicitly grant patent rights alongside copyright, protecting against contributor patent claims. Permissive types (MIT, Apache) allow seamless integration into commercial software; copyleft (GPL) requires derivatives to remain open, a critical factor for secure communication or distributed processing tools.
Can open source projects use machine learning or artificial intelligence under a free and open license?
Yes, many AI/ML projects thrive under permissive licenses like MIT for broad adoption. However, technical challenges arise with copyleft: training data/models must comply if distributed, but most (e.g., TensorFlow under Apache) use permissive types for better understanding and collaboration across software development teams.
What license type should I choose for modified versions of open source projects?
Select an appropriate license matching your goals: MIT for maximal reuse (even in proprietary), GPL for ensuring modified versions stay open or dual-licensing (e.g., community MIT, enterprise proprietary). Always preserve the original copyright notice and check license type compatibility before combining components.

