Live stream: Sparks Fly, When Security Meets AI
2025-02-13 14:00 - 15:00 (Asia/Kolkata)
AI is now everywhere! But how prepared are we to protect our data, models, and defend other assets?
Join us for a special episode of our live streams where we explore the critical intersection of open source security and artificial intelligence. We’ll delve into the lack of security measures protecting AI systems and the urgent need to address the growing needs. This stream will help you gain an understanding of the vast attack surface in AI, from data poisoning and model theft to adversarial attacks and malicious code injection. It will also educate you about the potential risks of running untrusted AI/ML models, which would lead to attacks including cryptojacking, remote code execution, and data breaches.
This live stream features special guest Keerthana Rampa, who is an Associate Project Manager at AccuKnox. She is a leading expert in AI security and will share her deep knowledge and insights on the challenges and solutions in this rapidly evolving field.

OpenSSF Policy Summit DC 2025
2025-03-04
Hosting: OpenSSF Policy Summit is coming to DC on March 4, 2025! This event addresses the security challenges for the consumption of Open Source Software (OSS) in critical infrastructure sectors and beyond. The event is hosted by the Open Source Security Foundation (OpenSSF), an initiative of the Linux Foundation. Learn more about the event: https://events.linuxfoundation.org/openssf-policy-summit-dc/

Beyond the SBOM: Ensuring Integrity with Attestations
2025-03-05
The “Beyond the SBOM: Ensuring Integrity with Attestations” event, hosted by the SBOMit community, seeks to raise awareness about the limitations of single SBOMs and even signed SBOMs in ensuring software supply chain security. This summit will highlight the critical role of attestations in verifying and enhancing SBOM integrity, featuring talks from industry leaders and breakout sessions to foster collaboration and innovation in the field.

Linux Foundation Member Summit
2025-03-18 - 2025-03-20
Attending: The OpenSSF is attending the Linux Foundation Member Summit 2025. This event is the annual gathering for Linux Foundation member organizations. An annual gathering for Linux Foundation members that fosters collaboration, innovation, and partnerships among the leading projects and organizations working to drive digital transformation with open source technologies. It is a must-attend for business and technical leaders looking to advance open source strategy, implementation, and investment in their organizations and learn how to collaboratively manage the largest shared technology investment of our time.

Building A Diverse Understanding About Open Source Security with Arjun BM
2025-03-27 14:00 - 15:00 UTC
Dive Deep into the World of Cyber Security with Arjun BM, who is presently serving as the Head of Security at a global retail organization!
Join us for an exclusive live stream with the award-winning cyber security leader, Arjun BM! With over 20 years of experience having worked with cybersecurity within various domains, Arjun brings unparalleled insights into the ever-evolving landscape of digital threats.
In what is expected to be an engaging session, Arjun will delve into the following critical areas:
Security in Retail: Explore the unique challenges and strategies involved in safeguarding digital storefronts from various malicious actors.
Software Supply Chain Security: Uncover the vulnerabilities and best practices for securing the software supply chain in today’s interconnected world.
The India Cybersecurity Situation: Gain a deep understanding of the current cybersecurity landscape in India, including emerging threats and opportunities.
Don’t miss this opportunity to learn from a seasoned expert and get your burning cyber security questions answered live!
Arjun on LinkedIn

FIRST VulnCon 2025
2025-04-07 - 2025-04-10
Sponsoring: OpenSSF is sponsoring and attending the 2025 Vulnerability Management Ecosystem Collaboration, Ideation, and Action Conference (aka “VulnCon”) Also sponsored by FIRST and the CVE Program. The conference will take place April 7th through 10, 2025. The location for the event will again be the North Carolina State University, McKimmon Center.
The purpose of the conference is to collaborate with various vulnerability management and cybersecurity professionals to develop forward leaning ideas that can be taken back to individual programs for action to benefit the vulnerability management ecosystem. A key goal of the conference is to understand what important stakeholders and programs are doing within the vulnerability management ecosystem and best determine how to benefit the ecosystem broadly.
VulnCon is Co-Hosted by FIRST and the CVE Program. This event will be open to both FIRST members and non-members around the world who are part of the vulnerability ecosystem.

RSA Conference
2025-04-28 - 2025-05-01
Attending: The OpenSSF is attending the RSA Conference 2025. Join us in San Francisco from April 28 to May 1. At RSAC™ 2025, you’re not just attending a conference—you’re stepping into a vibrant, thriving community of thinkers, innovators, and achievers. Though we come from different corners of the cybersecurity world, we are united by a common mission: to foresee risks, counter threats, and embrace the challenges ahead. Together, we shape the future of security. Together, we shine as one.

Threat Hunting With(in) Open Source
2025-05-27 14:00 - 15:00 UTC
Threat hunting in cybersecurity is a proactive and iterative process of searching through networks, endpoints, and datasets to detect malicious, suspicious, or risky activities that have evaded existing security defenses. Unlike traditional security measures that react to known threats or alerts, threat hunting assumes that adversaries may already be present in the environment and actively seeks them out using a combination of skilled human analysis and technology. Open source plays a significant role in the realm of threat hunting. Many powerful tools used for data collection, analysis, and visualization in threat hunting are open source, providing cost-effective and customizable options for security teams.
In this informative session, Rohit Sadgune takes us through his experience with threat hunting, with a healthy dose of OSS. Join us live on May 27th at 2 pm IST.

Introduction To The OpenSSF
2025-05-29 20:00 - 21:00 UTC
Often asked question ― What can be wrong with open source, that I need to secure it?
This session will provide answers. Along with a comprehensive overview of the vital work being done by the OpenSSF to address these critical challenges head-on. We will explore the landscape of key OpenSSF projects and initiatives, designed to identify, fix, and prevent security vulnerabilities in open source software. Learn how the OpenSSF community is working collaboratively to build a more secure open source supply chain for everyone. Whether you’re a developer, security professional, or simply sit downstream in open source ―― understanding the OpenSSF is crucial in navigating the future of software security.
Join us for a live stream introducing the Open Source Security Foundation (OpenSSF), a cross-industry collaboration dedicated to improving the security of the open source software ecosystem. As open source adoption accelerates globally, so too do the associated security risks, creating widening “chasms” that malicious actors can exploit. This increasing reliance on open source components means that vulnerabilities can have a significant “blast radius” across diverse applications and industries.
Tune in to learn how you can benefit from and contribute to a more secure open source world.

Zero Trust Network Access
2025-06-03 14:00 - 15:00 (Asia/Kolkata)
Presented by Tushar Anand, an experienced Security Engineer specializing in cloud security, application security, and compliance, with extensive skills in pentesting and risk management.
In today’s evolving threat landscape, traditional perimeter-based security is no longer sufficient. This talk, “Zero Trust Network Access,” will delve into the fundamental principles of Zero Trust and its critical role in modern network security. We will explore how assuming “never trust, always verify” can drastically enhance your organization’s security posture.
Tushar will guide you through the core concepts of Zero Trust Network Access (ZTNA) and discuss its relationship with broader network security practices. A key highlight of this session will be a demonstration of Qryptic, an open-source tool built by Tushar to practically illustrate ZTNA principles in action. This will provide valuable insights into how open source can empower security professionals to implement and understand complex security models. Join this session to deepen your understanding of ZTNA, explore practical open-source solutions, and learn how to commit to safeguarding your digital environments in an increasingly complex world.

Open Source LLM Security
2025-06-14 14:00 - 15:00 (Asia/Kolkata)
As Large Language Models (LLMs) become increasingly prevalent, the security of their open-source variants presents unique and critical challenges. While offering flexibility and accessibility, the open nature of these models can expose them to specific vulnerabilities and attack vectors. This talk will explore the emerging security landscape surrounding open-source LLMs, discussing risks such as data poisoning, model inference attacks, and supply chain compromises. Understanding these threats is vital for developers and users to leverage LLMs safely and effectively. We will delve into key security considerations and potential mitigation strategies for building and deploying secure open-source LLM applications.

OpenSSF Community Day Japan
2025-06-18
Hosting: OpenSSF Community Days bring together a vibrant community from across the Security and Open Source ecosystems to share ideas and progress on capabilities that make it easier to sustainably secure the development, maintenance, and consumption of the software on which we all depend. These events, held regionally and co-located with KubeCon or Open Source Summits, offer an opportunity to engage with the brightest minds in security for a day of collaboration and innovation in software security best practices. As a home for tools, standards, and education, OpenSSF provides attendees the chance to explore these resources, share their experiences, and contribute to a safer and more secure digital world.

Open Source Summit: North America
2025-06-23 - 2025-06-25
Sponsoring: OpenSSF is sponsoring another Open Source Summit this year! Open Source Summit is the premier event for open source developers, technologists, and community leaders to collaborate, share information, solve problems, and gain knowledge, furthering open source innovation and ensuring a sustainable open source ecosystem. It is the gathering place for open-source code and community contributors. Be sure to visit our booth and say hi to the community!
Visit the OpenSSF Booth #B7 in the Exhibit Hall for live demos, swag, and conversations with the community powering open source security.
OpenSSF Booth Schedule
Monday, June 23 (all times MT)
10:30 a.m. – 11:30 a.m.: Zarf
11:30 a.m. – 12:30 p.m.: Zarf
12:30 p.m. – 1:30 p.m.: Model Signing
1:30 p.m. – 2:30 p.m.: Scorecard, Allstar, GUAC
3:30 p.m. – 4:30 p.m.: Scorecard, Allstar, GUAC
Tuesday, June 24
10:30 a.m. – 11:30 a.m.: Zarf, OpenVEX
11:30 a.m. – 12:30 p.m.: bomctl, Protobom
12:30 p.m. – 1:30 p.m.: Securing Project Repos with OSPS Baseline
1:30 p.m. – 2:30 p.m.: BEAR
2:30 p.m. – 3:30 p.m.: Baseline Compliance with OpenSSF Projects
3:30 p.m. – 4:30 p.m.: Sigstore, Scorecard, Allstar, GUAC
4:30 p.m. – 5:30 p.m.: Scorecard, Allstar, GUAC
5:30 p.m. – 6:30 p.m.: gittuf
Wednesday, June 25
10:20 a.m. – 11:30 a.m.: BEAR
11:30 a.m. – 12:30 p.m.: Automated Governance with ORBIT, Zarf
12:30 p.m. – 1:30 p.m.: Zarf, SLSA Source
1:30 p.m. – 2:10 p.m.: gittuf

OpenSSF Community Day NA 2025
2025-06-26
Hosting: OpenSSF community, join us in Denver this summer! OpenSSF Community Days are hosted regionally, they are an opportunity for Community Members from across the Security and Open Source ecosystem to get together and share ideas and progress on capabilities that make it easier to sustainably secure the development, maintenance, and consumption of the open source software (OSS) we all depend on. Mark your calendar and get ready to meet & connect with the community!

Blackhat USA 2025
2025-08-02 - 2025-08-05
Attending: Join us as we attend Blackhat USA this year in Las Vegas!

Black Hat USA returns to the Mandalay Bay Convention Center in Las Vegas with a 6-day program. The event will open with four days of specialized cybersecurity Trainings (August 2-5), with courses for all skill levels. Also taking place during Black Hat USA is Summit Day on Tuesday, August 5, followed by the two-day main conference on August 6 & 7 featuring more than 100 selected Briefings, dozens of open-source tool demos in Arsenal, a robust Business Hall, networking and social events, and much more.

OpenSSF Community Day India
2025-08-04
Hosting: Join us for the OpenSSF Community Day India this summer! Co-located with KubeCon + CloudNativeCon India, this event will bring the open source community together in Hyderabad, India.
About OpenSSF Community Days: OpenSSF Community Days bring together a vibrant community from across the Security and Open Source ecosystems to share ideas and progress on capabilities that make it easier to sustainably secure the development, maintenance, and consumption of the software on which we all depend. These events, held regionally and co-located with KubeCon or Open Source Summits, offer an opportunity to engage with the brightest minds in security for a day of collaboration and innovation in software security best practices. As a home for tools, standards, and education, OpenSSF provides attendees the chance to explore these resources, share their experiences, and contribute to a safer and more secure digital world.

DEF CON 2025
2025-08-07 - 2025-08-10
The OpenSSF community is attending DEF CON 2025. DEF CON is one of the oldest continuously running hacker conventions around, and also one of the largest. Originally started in 1993, it was a meant to be a party for member of “Platinum Net”, a Fido protocol based hacking network out of Canada.

Open Source Summit Europe
2025-08-25 - 2025-08-27
Sponsoring: This year, we’re proud to sponsor Open Source Summit Europe and join the event alongside the OpenSSF community.
Open Source Summit is the premier gathering for open source developers, technologists, and community leaders to collaborate, share knowledge, solve challenges, and drive innovation—ensuring a sustainable open source ecosystem. It’s where code meets community.

We’ll have a booth presence at the event—stop by for project demos and community office hours:
Aug 25 (Monday):

10:30-12:30: AMA (Ask Me Anything) Baseline: Office Hours with Eddie Knight, Sonatype

12:30-14:30: Demo: Securing Software Repositories WG + RSTUF Project (Kairo de Araujo, Eclipse Foundation)
14:30-16:30: OpenSSF Mentor Program (Kairo de Araujo) | All things CRA (Harald Fischer)
16:30-17:35: Model signing and integrations with model hubs (Mihai Maruseac, Google)

Aug 26 (Tuesday):

10:30-12:30: All-things CRA – What Contributors & Maintainers need to know (Götz Martinek; Roman Zhukov, Red Hat) | Mapping to OSPS Baseline (Ben Cotton, Kusari)
16:30 – 18:30: AMA (Ask Me Anything) DevRel with Katherine Druckman

Aug 27 (Wednesday)

10:30-12:30: OSPS Baseline Office Hour (Ben Cotton, Kusari; Eddie Knight, Sonatype)
12:30-14:30: AMA (Ask Me Anything) DevRel – Katherine Druckman | AMA (Ask Me Anything) AI/ML Working Group – Mihai Maruseac, Google

If you’d like to reserve a slot for a demo, sign up for a session here.

OpenSSF Community Day Europe
2025-08-28
Hosting: OpenSSF is hosting another Community Day in Europe this summer, and we’d love for you to join us in beautiful Amsterdam, co-located with Open Source Summit EU! This event brings together a dynamic community from the security and open-source ecosystems to share ideas and progress on advancing the capabilities that make it easier to securely develop, maintain, and consume the software we all rely on. Held regionally alongside KubeCon and Open Source Summits, these events provide an opportunity to connect with top minds in security for a day of collaboration and innovation in software security best practices. As a hub for tools, standards, and education, OpenSSF offers attendees the chance to explore these resources, share experiences, and contribute to a safer, more secure digital world.

Open Source Security Meetup Tokyo
2025-09-26
Hosting: Join us at the OSS Security Meetup in Tokyo. The event will feature reports from Open Source Summit Europe 2025 and OpenSSF Community Day Europe, with sessions in Japanese covering the EU Cyber Resilience Act (CRA), SBOMs, and OSS security insights from Fujitsu, Renesas, and Cybertrust Japan.
Website: https://www.linuxfoundation.jp/events/2025/09/oss-security-meetup-on-september-26/

Open Source in Finance Forum New York
2025-10-21 - 2025-10-22
Sponsoring: The OpenSSF is sponsoring Open Source in Finance Forum New York this fall. The Open Source in Finance Forum (OSFF) is the premier event that connects the leaders in financial services, technology, and open-source innovation. This conference is uniquely designed to foster partnerships, advance talent development and accelerate technological advancements across the finance industry; building faster, trusted and secure solutions.

PyTorch Conference
2025-10-21 - 2025-10-23
Speaking: We’re going to be at the PyTorch Conference. OpenSSF’s AI/ML Security Working Group will host a group discussion on applying the lessons learned from DevSecOps to AI and Machine Learning.
Website: https://events.linuxfoundation.org/pytorch-conference

Linux Foundation Europe Member Summit
2025-10-28
Attending: The OpenSSF will be at the Linux Foundation Europe Member Summit this year! The annual gathering for Linux Foundation member organizations that fosters collaboration, innovation, and partnerships among the leading projects and organizations working to drive digital transformation with open source technologies.
Website: https://events.linuxfoundation.org/lf-europe-member-summit/

The Linux Foundation Europe Roadshow
2025-10-29
OpenSSF will sponsor and host the CRA in Practice: Secure Maintenance track, building on last year’s standing-room-only CRA workshop.

European Open Source Security Forum
2025-10-30
Hosting: The Forum is co-hosted by the Open Source Security Foundation (OpenSSF), a cross-industry initiative of the Linux Foundation dedicated to securing open source software, and the Centre for European Policy Studies (CEPS), a leading think tank on European affairs.
Date & Location: 30 October 2025 · Brussels
Registration: Complimentary, but space is limited. Please express your interest and the team will confirm your registration details.

OpenSSF Community Day Korea
2025-11-04
Hosting: Join Us at OpenSSF Community Day Korea – November 4, 2025 | Seoul, South Korea
OpenSSF Community Day Korea is a one-day event colocated with Open Source Summit Korea, bringing together the open source security community across the Asia-Pacific region. Whether you’re a developer, maintainer, researcher, or security professional, this event is your opportunity to connect, collaborate, and contribute to the future of open source security.

OSPOlogyLive Lyon
2025-11-05 08:00 - 2025-11-06 17:00 UTC
Speaking: Join the sixth edition of OSPOlogyLive Europe in Lyon to help organizations navigate open source management, strategy, and Open Source Program Offices’ operations in Europe. Hosted by Réseau de Transport d’Electricité and LF Energy in collaboration with TODO EU Chapter, Linux Foundation Europe, InnerSource Commons, CHAOSS, OpenSSF, CURIOSS, and OpenChain
Seats are limited to 50 people and require a direct invitation from organizers. People can express their interest in attending OSPOlogyLive Lyon by clicking the button on the official website.

Open Source SecurityCon 2025
2025-11-10
Hosting: We excited to host Open Source SecurityCon 2025 this year. This is a new event that fosters collaboration and shares innovation in cloud native security and open source software security. Sessions will cover architecture and policy, secure software development, supply chain security, identity and access, and open source public policy. The 1-day event will gather a diverse community of professionals to include software developers, security engineers, public sector experts, CISOs, CIOs and tech pioneers to address challenges and opportunities in modern security. Join us to collaborate and discover tools, knowledge and strategies to ensure a safer, more secure tomorrow.

CFP - KubeCon CloudNativeCon Japan
2026-01-20 - 2026-03-29
🗓 CFP closes: March 29 at 23:59 Tokyo Standard Time (UTC+9:00)
📍 Event date: July 29 – 30, 2026
📍 Event location: Yokohama, Japan
👉 Submit your proposal

GVIP Summit #01
2026-01-28 09:00 - 17:00 (Europe/Paris)
Speaking: Join the OpenSSF Community at the GVIP Summit #01 in Brussels, Belgium. This summit brings together global leaders in open source security, policy, and vulnerability management to shape the future of vulnerability intelligence. As long-standing systems like CVE and NVD face growing challenges around funding, scalability, and trust, the community is coming together to define what comes next.
Hosted by the Global Vulnerability Intelligence Platform (GVIP), this one-day summit convenes stakeholders from OpenSSF, OWASP, Eclipse Foundation, Open Forum Europe, and the Sovereign Tech Resilience program to discuss sustainable, trusted models for sharing vulnerability data—and to collaboratively design the next generation of global vulnerability governance.
