Open Source Security Foundation

The Invisible Threat: Secure & Sovereign Digital Backbone
2026-03-11 14:00 - 15:00 UTC
As India’s critical infrastructure shifts from a hardware-heavy setup to “softwarized” environments, our national security now depends on the integrity of the software supply chain. Join us for an in-depth session with Arpit Tripathi as we move beyond traditional cybersecurity tropes to discuss why the real battlefield isn’t the radio—it’s the interface.
We will explore how modern, cloud-native telecom systems are vulnerable not just to hackers, but to fundamental modeling failures in Service-Based Interfaces (SBI) and API trust assumptions.
Key Discussion Points

The Shift to Softwarization: Why software supply chain security is now a geopolitical imperative.
Beyond the Radio: Understanding the new attack surfaces in API-driven, interconnected systems.
Policy & Standards: Insights into Standard-Essential Patent (SEP) governance and the role of the TSDSI in India.
Proactive Defense: Why designing security at the interface level is the only way to move from “reacting” to “preventing.”

Meet the Speaker
Arpit Tripathi is a Telecom Engineer and Research Scholar at the Networked and Wireless Systems Lab (IIT Hyderabad). With a unique background spanning both deep technical engineering and public policy, Arpit’s work focuses on the intersection of open-source security, telecom infrastructure, and the doctrinal analysis of tech policy governance in India.

Date: 11th March 2026
Time: 2 PM IST

Security In An Open World
2026-03-19 14:00 - 15:00 (Asia/Kolkata)
Join us on March 19th 2026 for a chat with Abhishek Chauhan, who leads Sonatype India.
Millions of software developers trust Sonatype to keep their open source codebases, libraries, and dependencies safe. This is one of the oldest companies securing the software supply chain.
India is home to one of the world’s fastest-growing developer communities and is rapidly emerging as a key market for AI-driven software development. The demand for building, consuming, and securing code is reaching unprecedented levels as organizations accelerate their adoption of modern technologies.
At the same time, the country continues to produce exceptional engineering talent, making it a global hub for innovation and technical expertise. Given these factors, India presents a compelling opportunity for Sonatype to deepen its innovation and talent footprint.
Another important topic is the Security Slam event! We will spend a little time talking about what the event is, what Sonatype aims to achieve, and how best you can participate in this.
Guest: Abhishek Chauhan
Senior Director, Sonatype
Date: 19th March 2025
Time: 2 pm to 3 pm IST

Sword and Shield: Security Strategy Needs Both Offense & Defense
2026-04-09 14:00 - 15:00 (Asia/Kolkata)
In the world of software development, security is often treated like the “veggies” of the SDLC—everyone knows they’re good for you, but most developers would rather just skip straight to the dessert (shipping code). But what happens when the “bad guys” decide to join the party uninvited?
In this episode, we sit down with two titans of the industry to see what happens when the irresistible force of Red Teaming meets the immovable object of Blue Teaming.
Meghana Rao, our resident VAPT and Cloud Security specialist, walks us through the art of the “friendly break-in.” She’ll explain why thinking like a villain is the only way to build a digital fortress. On the flip side, Shubham Mishra, a seasoned Threat Hunter and Insider Threat specialist, shows us how she tracks the whispers in the wires to catch intruders before they even realize they’ve been spotted.
Together, they’ll dive into the “Why” of the tandem. Join us to learn why Red and Blue aren’t rivals, but actually the ultimate “work spouses.” You will also learn how this maps to the SDLC Lifecycle. Fully understand how to bake security into your code so you aren’t trying to “bolt it on” while the house is already on fire.
Whether you’re a developer trying to understand why your security lead is crying, or a CISO looking to harmonize your teams, this episode provides the roadmap to a safer digital landscape.
Date:9th April 2026
Time: 2 pm IST
