One common misconception about open source software is that it can be changed by anyone and is less secure; however, most open source is strictly governed. For example, the Apache Software Foundation has tight configuration management controls for developers. Its products are so good that most major software vendors include some Apache software in their products including Microsoft, IBM, Oracle and Sun.