CFP - KubeCon CloudNativeCon Japan
2026-01-20 - 2026-03-29
🗓 CFP closes: March 29 at 23:59 Tokyo Standard Time (UTC+9:00)
📍 Event date: July 29 – 30, 2026
📍 Event location: Yokohama, Japan
👉 Submit your proposal

GVIP Summit #01
2026-01-28 09:00 - 17:00 (Europe/Paris)
Speaking: Join the OpenSSF Community at the GVIP Summit #01 in Brussels, Belgium. This summit brings together global leaders in open source security, policy, and vulnerability management to shape the future of vulnerability intelligence. As long-standing systems like CVE and NVD face growing challenges around funding, scalability, and trust, the community is coming together to define what comes next.
Hosted by the Global Vulnerability Intelligence Platform (GVIP), this one-day summit convenes stakeholders from OpenSSF, OWASP, Eclipse Foundation, Open Forum Europe, and the Sovereign Tech Resilience program to discuss sustainable, trusted models for sharing vulnerability data—and to collaboratively design the next generation of global vulnerability governance.

EU Open Source Policy Summit
2026-01-30 09:00 - 20:00 (Europe/Paris)
Attending: The OpenSSF community will be onsite at EU Open Source Policy Summit. Hosted by OpenForum Europe, EU Open Source Policy Summit will bring together leaders from the public and private sectors to focus on one clear proposition: open source delivers digital sovereignty.

FOSDEM 2026
2026-01-31 - 2026-02-01
Attending: The OpenSSF community will be onsite at FOSDEM 2026 with a booth presence – come meet the community, learn about our latest projects, and connect with fellow open source security practitioners. We’ll also be highlighting talks and discussions related to the Cyber Resilience Act (CRA), so stay tuned for program updates.
FOSDEM is a free event for developers to meet, share ideas, and collaborate. Every year, thousands of contributors from around the world gather in Brussels to explore the latest in free and open source software. No registration required, just show up and join the community.

CFP - OpenSSF Community Day North America
2026-02-01 - 2026-02-15
🗓 CFP closes: February 15 at 11:59 PM CT
📍 Event date: Thursday, May 21
👉 Submit your proposal

CFP - Open Source in Finance Forum
2026-02-01 - 2026-03-15
🗓 CFP closes: March 15 at 23:59 GMT / 16:59 PDT
📍 Event date: Thursday, June 25
👉 Submit your proposal

CFP - Diana Initiative 2026 (Online Event)
2026-02-01 - 2026-04-13
🗓 CFP closes: April 13 at 11:59pm PT
📍 Event date: May 30
👉 Submit your proposal

CFP - CommunityDays KC (Kansas City)
2026-02-11 - 2026-03-29
🗓 CFP closes: March 31 at 11:59pm CST
📍 Event date: May 28-29
📍 Event location: Kansas City, MO (USA)
👉 Submit your proposal

CFP - All Things Open 2026
2026-02-17 - 2026-03-31
🗓 CFP closes: March 31 at 23:59 GMT / 16:59 PDT
📍 Event date: October 19 – 20, 2026
📍 Event location: Raleigh, NC (USA)
👉 Submit your proposal

CFP - Black Hat USA
2026-02-23 - 2026-03-27
🗓 CFP closes: March 27 at 11:59pm PT
📍 Event date: August 1 – 6, 2026
📍 Event location: Las Vegas, NV (USA)
👉 Submit your proposal

The Linux Foundation Member Summit
2026-02-24 - 2026-02-25
Attending: The OpenSSF Community will be attending the Linux Foundation Member Summit, an annual gathering for Linux Foundation member organizations.

CFP - DevOpsDays Amsterdam 2026
2026-02-26 - 2026-03-29
🗓 CFP closes: March 29
📍 Event date: June 19, 2026
📍 Event location: Pakhuis de Zwijger – Amsterdam
👉 Submit your proposal

CFP - BSides Aarhus
2026-03-01 - 2026-04-10
🗓 CFP closes: April 10
📍 Event date: June 20, 2026
📍 Event location: INCUBA Next, Katrinebjerg, Aarhus
👉 Submit your proposal

CFP - BSides Porto
2026-03-01 - 2026-04-15
🗓 CFP closes: April 15
📍 Event date: June 26-27, 2026
📍 Event location: ISEP (Porto, Portugal)
👉 Submit your proposal

CFP - DevOpsDays Brasov (Romania)
2026-03-01 - 2026-04-17
🗓 CFP closes: April 17
📍 Event date: May 6-7, 2026
📍 Event location: Coresi Business Campus
👉 Submit your proposal

CFP - DevOpsDays Kraków
2026-03-01 - 2026-04-19
🗓 CFP closes: April 19
📍 Event date: June 6, 2026
📍 Event location: ECHO Miasta, ul. Kapelanka 56
👉 Submit your proposal

CFP - Open Source Summit Korea 2026
2026-03-01 - 2026-04-26
🗓 CFP closes: April 26
📍 Event date: August 11-12, 2026
📍 Event location: Grand InterContinental Seoul Parnas (Seoul)
👉 Submit your proposal

CFP - DevOpsDays Graz
2026-03-01 - 2026-04-30
🗓 CFP closes: April 30
📍 Event date: September 4-5, 2026
📍 Event location: WIFI & Campus02, Graz
👉 Submit your proposal

CFP - BSides Des Moines
2026-03-01 - 2026-04-30
🗓 CFP closes: April 30
📍 Event date: June 13, 2026
📍 Event location: FFA Center, Ankeny
👉 Submit your proposal

CFP - BSides TLV
2026-03-01 - 2026-04-30
🗓 CFP closes: April 30
📍 Event date: June 25, 2026
📍 Event location: Tel Aviv
👉 Submit your proposal

CFP - BSides SATX (San Antonio, TX)
2026-03-01 - 2026-05-01
🗓 CFP closes: May 1
📍 Event date: June 13, 2026
📍 Event location: St. Mary’s University
👉 Submit your proposal

CFP - DefCon 34
2026-03-01 - 2026-05-01
🗓 CFP closes: May 1 at midnight UTC
📍 Event date: August 6 – 9, 2026
📍 Event location: Las Vegas, NV (USA)
👉 Submit your proposal

SCALE 23x
2026-03-05 - 2026-03-08
Speaking: The OpenSSF community will be speaking at SCALE, North America’s largest community-run open source conference.

Don’t Gawk. Use GUAC Instead.
2026-03-05 14:00 - 15:00 (Asia/Kolkata)
The definition of “gawk” is “to stare stupidly, rudely, or with amazement, often with an open mouth”. This perfectly captures the reaction that software engineers have when they encounter supply chain security issues.
Lack of transparency is a huge blindside when working with open source tools. This blind spot could blow up into a project black hole — invisible, resource depleting, destructive — if not handled correctly. How do we build situational awareness from this position of incognizance?
Enter GUAC! A project built by the community and devised to solve the problem of not knowing your software composition.
Whether you’re an enterprise or just an enterprising indie dev, this session has something for you. Learn how to make use of GUAC for improving your supply chain security posture. Find out how teams are benefitting from better knowledge of the OSS components in their toolchain.
Guest Bio
Shreyas Pandya
Staff software engineer @Guidewire software
Shreyas Pandya is a results-oriented Software Engineer and leader with deep expertise in web application development. He has built web services (microservices), APIs, and has handled scalability, security, and cloud infrastructure. Shreyas possesses experience in working within agile environments and fast-paced startup teams. He currently serves as a Platform Engineer at Guidewire, where he leads a team of engineers in the delivery of various products.
Date: 5th March 2026
Time: 2 pm IST

The Invisible Threat: Secure & Sovereign Digital Backbone
2026-03-11 14:00 - 15:00 UTC
As India’s critical infrastructure shifts from a hardware-heavy setup to “softwarized” environments, our national security now depends on the integrity of the software supply chain. Join us for an in-depth session with Arpit Tripathi as we move beyond traditional cybersecurity tropes to discuss why the real battlefield isn’t the radio—it’s the interface.
We will explore how modern, cloud-native telecom systems are vulnerable not just to hackers, but to fundamental modeling failures in Service-Based Interfaces (SBI) and API trust assumptions.
Key Discussion Points

The Shift to Softwarization: Why software supply chain security is now a geopolitical imperative.
Beyond the Radio: Understanding the new attack surfaces in API-driven, interconnected systems.
Policy & Standards: Insights into Standard-Essential Patent (SEP) governance and the role of the TSDSI in India.
Proactive Defense: Why designing security at the interface level is the only way to move from “reacting” to “preventing.”

Meet the Speaker
Arpit Tripathi is a Telecom Engineer and Research Scholar at the Networked and Wireless Systems Lab (IIT Hyderabad). With a unique background spanning both deep technical engineering and public policy, Arpit’s work focuses on the intersection of open-source security, telecom infrastructure, and the doctrinal analysis of tech policy governance in India.

Date: 11th March 2026
Time: 2 PM IST

FOSS Backstage
2026-03-16 - 2026-03-17
Speaking: The OpenSSF Community will be speaking at The 8th edition of FOSS Backstage in Berlin on 16-17 March 2026.

Security In An Open World
2026-03-19 14:00 - 15:00 (Asia/Kolkata)
Join us on March 19th 2026 for a chat with Abhishek Chauhan, who leads Sonatype India.
Millions of software developers trust Sonatype to keep their open source codebases, libraries, and dependencies safe. This is one of the oldest companies securing the software supply chain.
India is home to one of the world’s fastest-growing developer communities and is rapidly emerging as a key market for AI-driven software development. The demand for building, consuming, and securing code is reaching unprecedented levels as organizations accelerate their adoption of modern technologies.
At the same time, the country continues to produce exceptional engineering talent, making it a global hub for innovation and technical expertise. Given these factors, India presents a compelling opportunity for Sonatype to deepen its innovation and talent footprint.
Another important topic is the Security Slam event! We will spend a little time talking about what the event is, what Sonatype aims to achieve, and how best you can participate in this.
Guest: Abhishek Chauhan
Senior Director, Sonatype
Date: 19th March 2025
Time: 2 pm to 3 pm IST

Open Source SecurityCon EU 2026
2026-03-23
Hosting: Open Source SecurityCon is coming to Europe! This is a new event that fosters collaboration and shares innovation in cloud native security and open source software security. Sessions will cover architecture and policy, secure software development, supply chain security, identity and access, and open source public policy. The 1-day event will gather a diverse community of professionals to include software developers, security engineers, public sector experts, CISOs, CIOs and tech pioneers to address challenges and opportunities in modern security. Join us to collaborate and discover tools, knowledge and strategies to ensure a safer, more secure tomorrow.

KubeCon + CloudNativeCon Europe 2026
2026-03-23 - 2026-03-26
Sponsoring: OpenSSF is proud to sponsor KubeCon + CloudNativeCon Europe 2026! We’ll have a full booth presence throughout the week, plus a colocated event – Open Source SecurityCon – taking place on 23 March. Join us to connect with the community, learn about the latest in open source security, and explore how our projects support a more secure cloud native ecosystem.
KubeCon + CloudNativeCon brings together adopters and technologists from leading open source and cloud native communities. This year’s conference takes place in Amsterdam from 23–26 March 2026.Come visit us at the OpenSSF booth!

RSAC Conference 2026
2026-03-23 - 2026-03-26
Attending: The OpenSSF community is attending RSAC Conference this year. RSAC Conference is a premier global cybersecurity event series, with the 2026 USA event taking place March 23–26 in San Francisco, focusing on AI-driven security, agentic security, and collaborative defense.
Andrew Carney from DARPA, will join Taesoo Kim, Michael Brown, and Tyler Nighswander for a conversation on what they’ve built and learned since winning AI Cyber Challenge last August.
If you’re interested in where automated cyber defense is heading, join us for “Automated Cyber Defense: Lessons from DARPA’s AI Cyber Challenge” at RSA Conference 2026, Thursday at 12:20 PM PDT in Moscone South 202.
Learn more about the session.
