OpenSSF

OpenSSF, also known as Open Source Security Foundation, is a company that is committed to improving and enhancing security within the open source ecosystem. Our primary goal is to collaborate with various communities and work together to advance open source security for all stakeholders involved. At OpenSSF, we firmly believe in the power of teamwork and collaboration. We actively engage with existing communities and work upstream to develop and deliver security tooling and best practices that effectively secure critical open source projects. Our working groups play a vital role in the planning, design, and implementation of these tools and practices. To keep our community well-informed and engaged, we regularly host town halls where industry experts share the latest updates and happenings in open source security. These town halls serve as an excellent platform for individuals and organizations to connect, learn, and exchange ideas. Education and training are also at the forefront of our priorities. We offer free courses on secure coding practices as part of our Software Development Fundamentals Professional Certificate. Through these courses, we aim to equip individuals with the necessary skills and knowledge to ensure the security of open source software. Our recent blogs cover a wide range of topics, including the importance of accurately representing open source licenses in SBOM generators. We recognize the widespread use of open source software in data centers, consumer devices, and applications, and understand that securing open source supply chains requires a combination of automated tooling, best practices, education, and collaboration. We take pride in having a growing list of organizations supporting our mission and funding the development and adoption of OpenSSF initiatives. By joining us, these organizations contribute to the advancement of securing open source technology and play a crucial role in building a safer open source ecosystem. OpenSSF is dedicated to creating a secure and collaborative environment within the open source community. Together, we can make a significant impact on the security of open source software and ensure its widespread adoption.