Join us at Open Source SecurityCon Europe on March 23, 2026

🎉 The 2025 OpenSSF Annual Report Has ArrivedDiscover the milestones, community momentum, and ecosystem-wide wins

Read & Download Now

The Open Source Security Foundation (OpenSSF) is a community of software developers, security engineers, and more who are working together to secure open source software for the greater public good.

Collaborate on capabilities and best practices that secure open source software.

Participate in the latest community conversations and engage with experts.

Take free courses on secure coding practices as part of our certificate program.

Explore our helpful security guides to help secure your project from the start.

Members

Meet Our Members

What’s in the SOSS? Podcast

OpenSSF Hosted Events

OpenSSF events are a great opportunity to get involved with the OpenSSF community across the security and open source ecosystem. Join us and share ideas, progress, and collaborate on securing open source software.

Read the Latest Reports From OpenSSF

OpenSSF Annual Report
2025 Annual Report

2025 Annual Report

Secure Open Source Software Vision Brief 2025
Improving Risk Management Decisions with SBOM Data

Improving Risk Management Decisions with SBOM Data

Practical Guide for Building Robust AI/ML Pipeline Security
MLSecOps Whitepaper

Practical Guide for Building Robust AI/ML Pipeline Security

Recent Blog Posts

VIEW ALL BLOGS →

ImageBlogGuest BlogFirst Steps Towards Cyber Resilience Act Conformity: Biking the CRA with Balena at FOSDEM 2026
March 11, 2026

First Steps Towards Cyber Resilience Act Conformity: Biking the CRA with Balena at FOSDEM 2026

Recently, I spoke at the Free and Open Source Developers' European Meeting (FOSDEM) 2026 on “First steps towards Cyber Resilience Act (CRA) conformity: A practical introduction to cybersecurity risk management.”
OpenSSF
Love0
GemaraBlogGuest BlogIntroducing the Gemara Model
March 9, 2026

Introducing the Gemara Model

By Eddie Knight, Hannah Braswell, and Jenn Power  Software development has reached a point where traditional Governance, Risk, and Compliance (GRC) can no longer keep up. Compliance activities often exist…
OpenSSF
Love0
ImageBlogYour Voice Belongs Here: How to Get Involved in the OpenSSF Community
March 5, 2026

Your Voice Belongs Here: How to Get Involved in the OpenSSF Community

One of the most common misconceptions we hear in the OpenSSF community is that you need special permission to contribute.  You do not.
OpenSSF
Love0

Open source software is pervasive in data centers, consumer devices, and applications. Securing open source software requires fostering collaboration, establishing best practices, and developing innovative solutions.

Join the growing list of organizations supporting the advancement of securing open source technology and funding the development and adoption of OpenSSF initiatives.

Explore Membership in OpenSSF

Mastodon