Announcing OpenBao v2.6!
We are thrilled to announce the availability of OpenBao v2.6, adding per-namespace sealing and the new workflow engine for cross-plugin communication!
The Open Source Security Foundation (OpenSSF) is a community of software developers, security engineers, and more who are working together to secure open source software for the greater public good.
Collaborate on capabilities and best practices that secure open source software.
Participate in the latest community conversations and engage with experts.
Take free courses on secure coding practices as part of our certificate program.
Explore our helpful security guides to help secure your project from the start.
Members
Projects
Working Groups
Whatās in the SOSS? Podcast
OpenSSF Hosted Events
OpenSSF events are a great opportunity to get involved with the OpenSSF community across the security and open source ecosystem. Join us and share ideas, progress, and collaborate on securing open source software.
Read the Latest Reports From OpenSSF
2026 CRA Awareness and Readiness Report
CRA Awareness and Readiness Report
Securing Open Source in the Age of AI
Securing Open Source in the Age of AI
Gemara: A Governance, Risk, and Compliance Engineering Model for Automated Risk Assessment
Gemara: A Governance, Risk, and Compliance Engineering Model for Automated Risk Assessment
Recent Blog Posts
OpenSSF Community Day Europe 2026: Schedule Highlights & What to Expect
OpenSSF Community Day Europe 2026: Schedule Highlights & What to Expect
OpenSSF Community Day Europe 2026 (October 6 in Prague), focuses on open source software security, regulatory compliance like the EU CRA, and AI supply chain risks. The one-day event features…
What Is a Dependency Firewall?
What Is a Dependency Firewall?
A dependency firewall is a security checkpoint that evaluates open source packages before they are installed. It can protect developer workstations, build environments, CI/CD pipelines, and AI coding agents by…
Open source software is pervasive in data centers, consumer devices, and applications. Securing open source software requires fostering collaboration, establishing best practices, and developing innovative solutions.
Join the growing list of organizations supporting the advancement of securing open source technology and funding the development and adoption of OpenSSF initiatives.