Open Source Security Foundation – Linux Foundation Projects

Navigating the EU’s Cyber Resilience Act (CRA)? Get our free eBook.

Free eBook

The Open Source Security Foundation (OpenSSF) is a community of software developers, security engineers, and more who are working together to secure open source software for the greater public good.

Collaborate on capabilities and best practices that secure open source software.

Participate in the latest community conversations and engage with experts.

Take free courses on secure coding practices as part of our certificate program.

Explore our helpful security guides to help secure your project from the start.

What’s in the SOSS? Podcast

OpenSSF Hosted Events

OpenSSF events are a great opportunity to get involved with the OpenSSF community across the security and open source ecosystem. Join us and share ideas, progress, and collaborate on securing open source software.

Read the Latest Reports From OpenSSF

2026 CRA Awareness and Readiness Report
2026 CRA Awareness and Readiness Report

CRA Awareness and Readiness Report

Securing Open Source in the Age of AI
AI security eBook

Securing Open Source in the Age of AI

Gemara: A Governance, Risk, and Compliance Engineering Model for Automated Risk Assessment
Gemara

Gemara: A Governance, Risk, and Compliance Engineering Model for Automated Risk Assessment

Recent Blog Posts

VIEW ALL BLOGS →

Tech Talk: Stop Forking Around: How Upstream Contribution Minimizes Technical Debt & Streamlines CRA ReportingBlogNew OpenSSF Tech Talk: How Upstream Contribution Minimizes Technical Debt & Streamlines CRA Reporting
October 23, 2026

New OpenSSF Tech Talk: How Upstream Contribution Minimizes Technical Debt & Streamlines CRA Reporting

Maintaining private forks of open source software (OSS) comes with a hidden tax, costing organizations an average of 5,160 labor hours per release cycle in maintenance and engineering overhead. Beyond…
OpenSSF
Love0
BlogEU Cyber Resilience ActGuest BlogWho Checked It? Attestations, Gemara, and CRA Due Diligence
October 22, 2026

Who Checked It? Attestations, Gemara, and CRA Due Diligence

Discover how the OpenSSF Gemara project clarifies the complex world of security attestations, streamlines software supply chain evaluations, and helps organizations confidently meet EU Cyber Resilience Act (CRA) due diligence…
OpenSSF
Love0
AIBlogNew OpenSSF Guide: Finding and Fixing Vulnerabilities Using AI
October 20, 2026

New OpenSSF Guide: Finding and Fixing Vulnerabilities Using AI

AI has gotten good at finding software vulnerabilities, and attackers are already using it. For example, “AI-enabled adversaries increased attacks by 89% year-over-year” according to the CrowdStrike 2026 Global Threat…
OpenSSF
Love0

Open source software is pervasive in data centers, consumer devices, and applications. Securing open source software requires fostering collaboration, establishing best practices, and developing innovative solutions.

Join the growing list of organizations supporting the advancement of securing open source technology and funding the development and adoption of OpenSSF initiatives.

Explore Membership in OpenSSF

Mastodon