OpenSSF

Rethinking Post-Deployment Vulnerability Detection

OpenSSF Newsletter – March 2026

TL;DR: 💰 $12.5M New Funding → Anthropic, AWS, Google, and more invest in OSS & AI security  🤝 Ambassador Program Launch → New global initiative to empower community leaders  🛠️ No-Cost Tooling → Kusari Inspector now free for OpenSSF project maintainers  💎 The Gemara Model → A new 7-layer framework for GRC and automated risk…

Introducing the OpenSSF Ambassador Program

We're excited to launch the OpenSSF Ambassador Program - a global community of advocates who will help us promote secure open source development practices worldwide.

Kusari Partners with OpenSSF to Strengthen Open Source Software Supply Chain Security

OpenSSF Celebrates New Members, No-Cost Tooling, and Project Milestones

Leading Tech Coalition Invests $12.5 Million Through OpenSSF and Alpha-Omega to Strengthen Open Source Security

Linux Foundation Announces $12.5 Million in Grant Funding from Leading Organizations to Advance Open Source Security 

KubeCon + CloudNativeCon Europe 2026 Co-located Event Deep Dive: Open Source SecurityCon

Open Source SecurityCon (evolved from Cloud Native SecurityCon) returns for its second event, co-located with KubeCon + CloudNativeCon Europe 2026. The conference advances innovation and collaboration across open source software security and cloud native security. It brings together creators, maintainers, operators, and consumers who are actively involved in securing the software ecosystem.

Securing Agentic AI in Practice: From OpenSSF Guidance to Real-World Implementation

Agentic AI systems and AI-driven software workflows are evolving quickly, with more people building on top of them. With that shift comes new questions around trust, control, provenance, and secure interaction between models, tools, and users. Traditional cybersecurity models are being pushed to their limits, and the security stakes have never been higher.