Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

Security News

Tech's $90B Ghost Engineer Problem: Stanford Study Finds 9.5% of Engineers Do Almost Nothing

A Stanford study reveals 9.5% of engineers contribute almost nothing, costing tech $90B annually, with remote work fueling the rise of "ghost engineers."

Tech's $90B Ghost Engineer Problem: Stanford Study Finds 9.5% of Engineers Do Almost Nothing

Sarah Gooding

November 25, 2024


Last week, the idea of “ghost engineers” sparked a lively conversation across the tech world. It began with a viral tweet highlighting a hidden reality within software engineering: a subset of professionals in major tech companies who contribute minimal effort—often as little as two code changes per month at around five hours of work per week—while raking in $200-300K salaries.

According to Deedy Das, VC investor at Menlo Ventures, and many who confirmed his observations in the replies, this phenomenon isn’t confined to just the FAANG giants but extends to companies like Oracle, Salesforce, and Adobe.

The “Ghost Engineer” Lifestyle#

The ghost engineer phenomenon is a new twist on the classic "quiet quitting" saga. This particular breed of top engineering talent, affectionately dubbed 0.1x-ers, has mastered the art of looking busy while perfecting excuses for delays.

Das highlighted a few tools of the trade from the “quiet quitting” playbook:

  • “in a meeting” on slack
  • scheduled slack, email, code at late hours
  • private calendar with blocks
  • mouse jiggler for always online
  • “this will take 2 weeks” (1 day)
  • “oh, the spec wasn’t clear”
  • many small refactors
  • “build is having issues”
  • blocked by another team
  • will take time bcuz <obscure tech reason> like “race condition”
  • “can you create a jira for that?”

“And no, AI is not writing their code,” Das said. “Most of these people are chilling so hard they have no idea what AI can do.

“Most people in tech were never surprised that Elon could lay off 80% of Twitter, you can lay off 80% of most of these companies.”

Couple this with remote work, and you have a recipe for some engineers effectively disappearing into the ether, doing the bare minimum to remain employed.

Stanford Research Validates the Trend#

Anyone working in tech for awhile will have heard whispers and rumors of ghost engineering jobs, but Stanford researcher Yegor Denisov-Blanch recently shared findings that take these reports from urban legend to a statistically backed reality.

By analyzing private Git repositories of over 50,000 engineers at 100 companies, researchers discovered:

  • 9.5% of engineers do virtually no meaningful work.
  • Remote work amplifies the trend, with 14% of fully remote engineers falling into the “ghost” category compared to 6% of in-office counterparts.
  • Commit activity is often trivial, with 58% making fewer than three meaningful contributions per month.

The researchers’ model quantifies productivity by analyzing source code from private Git repos, simulating a panel of 10 experts evaluating each commit across multiple dimensions. Denisov-Blanch acknowledged that counting code commits is a flawed way to measure productivity but it can reveal inactivity. His team’s metric revealed that ~58% make <3 commits/month, and the other 42% make trivial changes, like editing one line or character--pretending to work.

Economic Impact of “Ghost Engineers”#

The financial implications of having ghost engineers on the payroll are staggering when you look at companies that employ tens of thousands of engineers. Stanford researchers estimate that by letting go of their “ghost” workforce, companies like Cisco, Intuit, and IBM could save billions annually, adding $465 billion to combined market caps—with zero impact on performance. On a global scale, even a conservative estimate suggests more than $90 billion is effectively wasted on engineers who contribute little to nothing.

Denisov-Blanch contends that it’s not just about money. This inefficiency stifles innovation and creates a ripple effect throughout the entire tech ecosystem.

“It’s insane that ~9.5% of software engineers do almost nothing while collecting paychecks,” he said. “This unfairly burdens teams, wastes company resources, blocks jobs for others, and limits humanity’s progress. It has to stop.”

Denisov-Blanch said his team’s next paper is on using LLMs to measure developer productivity and should be available in a few weeks. Companies with 50+ engineers can participate in the research by connecting their git repositories.

Security Implications of Employing Ghost Engineers#

Beyond the economic and productivity concerns, ghost engineers pose significant security risks. Their lack of meaningful engagement can lead to a few critical issues: unreviewed or improperly tested code changes, unnoticed vulnerabilities, and outdated systems left unpatched. A disengaged engineer might also miss—or deliberately ignore—critical security protocols, creating potential entry points for malicious actors.

When these engineers aren't actively involved in maintaining secure practices, they can create blind spots in a company’s defense strategy, increasing the risk of breaches or compliance failures. Threat actors can exploit disengaged engineers through phishing, social engineering, or leveraging neglected updates and poorly reviewed code to infiltrate systems and compromise security. Addressing these gaps requires better oversight and collaborative practices.

Productivity vs. Perception#

Before you start side-eyeing your coworkers, it’s worth noting that measuring productivity in software engineering is notoriously tricky. Commit counts or hours logged are often poor indicators of true impact. Some high-performing engineers—the mythical “10x engineers”—produce significant results with fewer, well-thought-out contributions.

However, the “ghost engineer” trend exposes systemic inefficiencies in talent management and performance evaluation. Remote work policies, once heralded as a game-changer, are now under the microscope. They’ve enabled flexibility for many but have also given rise to the ghost engineering phenomenon. The tug-of-war over remote versus in-office work is likely to intensify as companies grapple with these kinds of leadership and accountability issues.

Subscribe to our newsletter

Get notified when we publish new security blog posts!

Try it now

Ready to block malicious and vulnerable dependencies?

Install GitHub AppBook a demo

Related posts

Back to all posts
SocketSocket SOC 2 Logo

Product

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc