Register for Open Source SecurityCon North America 2026

Publications

Strengthening Software Supply Chain Security with OpenChain and OpenSSF
October 2026

Built to Last: Understanding the European Cyber Resilience Act (CRA)
July 2026

2026 CRA Awareness and Readiness Report

2026 CRA Awareness and Readiness Report
June 2026

Securing Open Source in the Age of AI eBook

Securing Open Source in the Age of AI
May 2026

Gemara

Gemara: A Governance, Risk, and Compliance Engineering Model for Automated Risk Assessment
March 2026

ROI for OSS Contribution

ROI for Open Source Software Contribution
February 2026

2025 Annual Report

OpenSSF Annual Report
December 2025

Alpha-Omega Annual Report
2025

Improving Risk Management Decisions with SBOM Data

Improving Risk Management Decisions with SBOM Data
September 2025

MLSecOps Whitepaper

Visualizing Secure MLOps (MLSecOps)
August 2025

Cybersecurity Skills Framework

Cybersecurity Skills Framework
May 2025

2025 Vision Brief

Secure Open Source Software Vision Brief 2025
February 2025

Alpha-Omega Annual Report
December 2024

2024 Annual Report cover

OpenSSF Annual Report
December 2024

Census III Report

Census III of Free and Open Source Software
December 2024

Plan for Improving Software Developer Security Education
March 2024

2023annualreportblog

OpenSSF Annual Report
December 2023

Cybersecurity in Energy Infrastructure: The Value of Open Source Software
November 2023

OpenSSF-SOSS-Vision-Brief

Secure Open Source Software Vision Brief 2023
September 2023

OpenSSF Annual Report 2022

OpenSSF Annual Report
December 2022

Alpha-Omega Annual Report
December 2022

Addressing Cybersecurity Challenges in Open Source Software
June 2022

Harvard Census II of Free and Open Source Software — Application Libraries
March 2022

The State of Software Bill of Materials (SBOM) and Cybersecurity Readiness
January 2022

Census I Whitepaper headline graphic

Census I Whitepaper: Open Source Software Needing Security Investments
June 2015