Open Source Security Foundation – Linux Foundation Projects

Help secure the future of open source. Become an OpenSSF member →
Collaborate on capabilities and best practices that secure open source software.
Participate in the latest community conversations and engage with experts.
Take free courses on secure coding practices as part of our certificate program.
Explore our helpful security guides to help secure your project from the start.
Directed, actionable insights into the security of your software supply chain.
Structured security requirements aligned with international frameworks, standards, and regulations.
Sigstore is a standard for signing, verifying, and protecting software.
Safeguarding artifact integrity across any software supply chain.
Using AI securely ("security for AI") and using AI to improve security of other products ("AI for security").
Multi-discipline approach to international regulation and legislation and application of cybersecurity frameworks.
Helping people understand and make decisions on the provenance of the code they maintain, produce and use.
Improving the overall security of the OSS ecosystem by helping advance vulnerability reporting and communication.
OpenSSF events are a great opportunity to get involved with the OpenSSF community across the security and open source ecosystem. Join us and share ideas, progress, and collaborate on securing open source software.
State of AI Impact on Software Security and Cybersecurity 2026
Navigating Open Source Software Development in the Generative AI Era
Strengthening Software Supply Chain Security with OpenChain and OpenSSF
Join the growing list of organizations supporting the advancement of securing open source technology and funding the development and adoption of OpenSSF initiatives.
Copyright © 2026 The Linux Foundation® . All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our Trademark Usage page. Linux is a registered trademark of Linus Torvalds. Privacy Policy and Terms of Use.