Skip to main content

Together, we’re securing the open source ecosystem.

OpenSSF is committed to collaboration and working both upstream and with existing communities to advance open source security for all.

Working Groups

Collaborate on the planning, design, and delivery of security tooling and best practices that secure critical open source projects.

Town Halls

Stay informed about the latest happenings in open source security and engage with experts in our community,

Training

Take free courses on secure coding practices as part of our Software Development Fundamentals Professional Certificate.

Recent Blogs

Rising Threat of Software Supply Chain AttacksBlog
August 18, 2023

The Rising Threat of Software Supply Chain Attacks: Managing Dependencies of Open Source Projects

If you're not using automation to monitor the security risks from your dependency tree, chances are your project is vulnerable. Although these vulnerabilities may not be malicious, they can still…
BlogPress Release
August 9, 2023

OpenSSF to Support DARPA on New AI Cyber Challenge (AIxCC)

The Open Source Security Foundation (OpenSSF) announced today at Black Hat 2023 its collaboration with the Defense Advanced Research Projects Agency (DARPA) on the AI Cyber Challenge (AIxCC) – a…
OpenSSF Criticality ScoreBlog
July 28, 2023

Understanding and Applying the OpenSSF Criticality Score in Open Source Projects

At Open Source Summit North America earlier this year as a 10th grader, Nathan Naveen, gave a talk about OpenSSF Criticality Score. Nathan takes a look at why understanding tools…

Open source software is pervasive in data centers, consumer devices, and applications. Securing open source supply chains requires a combination of automated tooling, best practices, education, and collaboration.

Join the growing list of organizations supporting the advancement of securing open source technology and funding the development and adoption of OpenSSF initiatives.

Explore Membership