Skip to main content

📣 Submit your proposal: OpenSSF Community Day Korea | Open Source SecurityCon

Register for OpenSSF Community Day North America 2025

June 26, 2025 | Denver, Colorado

Register Now

The Open Source Security Foundation (OpenSSF) is a community of software developers, security engineers, and more who are working together to secure open source software for the greater public good.

Collaborate on capabilities and best practices that secure open source software.

Participate in the latest community conversations and engage with experts.

Take free courses on secure coding practices as part of our certificate program.

Explore our helpful security guides to help secure your project from the start.

OpenSSF Hosted Events

OpenSSF events are a great opportunity to get involved with the OpenSSF community across the security and open source ecosystem. Join us and share ideas, progress, and collaborate on securing open source software.

Read the Latest Reports From OpenSSF

Secure Open Source Software Vision Brief 2025

Secure Open Source Software Vision Brief 2025

2024 Annual Report cover

2024 Annual Report

Alpha-Omega Annual Report

Alpha-Omega 2024 Annual Report

Recent Blog Posts

BlogGuest BlogFrom Sandbox to Incubating: gittuf’s Next Step in Open Source Security
June 6, 2025

From Sandbox to Incubating: gittuf’s Next Step in Open Source Security

We’re pleased to share that gittuf, a platform-agnostic Git security framework, has officially progressed to the Incubating Project stage under the Open Source Security Foundation (OpenSSF). This marks a major…
SBOMToolBlogGuest BlogChoosing an SBOM Generation Tool
June 5, 2025

Choosing an SBOM Generation Tool

Software Bills of Materials (SBOMs) are the foundational piece of understanding your software supply chain. By listing the components that go into your application, SBOMs give you a starting point…
CRAblogBlogEU Cyber Resilience ActGlobal Cyber PolicyOSS and the CRA: am I a Manufacturer or a Steward?
June 2, 2025

OSS and the CRA: am I a Manufacturer or a Steward?

The European Union’s Cyber Resilience Act (CRA) is a piece of legislation that covers all countries within the EU and the EEA and entered into force on 10th December 2024.…

Open source software is pervasive in data centers, consumer devices, and applications. Securing open source software requires fostering collaboration, establishing best practices, and developing innovative solutions.

Join the growing list of organizations supporting the advancement of securing open source technology and funding the development and adoption of OpenSSF initiatives.

Explore Membership in OpenSSF