Ostif

Welcome back from summer vacation! This year has been so busy for OSTIF and the industry at large that it's been nice to hear from many folks that they've taken time off in the past few months to relax. From cURL's summer break to the upcoming Labor Day w

Breaking the Cycle of Security Funding OSTIF has been advocating for open source security funding over the past decade. During that time when there was an exploit or devastating hack, there would be a bump in security investment that quickly waned as the

Artificial Intelligence (AI) Use in Security Research Policy First version: April 2026 Second version: May 2026 Last updated: July 2026 Refer to the OSTIF Open Source Security Audit Minimum Standards & Expectations for a quick start guide and security eng

002.2026 Community Spotlight: Antonela Conti, Project Manager and Admin for X41D-Sec We started working with Antonela immediately after she started for X41D-Sec. X41 had been working with OSTIF for a few years at this point, and both organizations were at

The Open Source Technology Improvement Fund is proud to share the results of our security audit of PyTorch ExecuTorch. PyTorch is a popular open source deep learning library, with multiple subprojects including ExecuTorch. ExecuTorch enables PyTorch on-de

The Open Source Technology Improvement Fund is proud to share the results of our security audit of Cortex. Cortex functions as a long-term, multi-tenant scalable open source storage for Prometheus and OpenTelemetry. Thanks to Quarkslab and the Cloud Nativ

The Open Source Technology Improvement Fund is proud to share the results of our security audit of Symfony YAML. Symfony is an open source PHP framework to develop high-performing web applications, and this work specifically focused on the the -YAML (YAML

The Open Source Technology Improvement Fund is proud to share the results of our security audit of KEDA. KEDA (which stands for Kubernetes-based Event Driven Autoscaler) is an open source project for scaling containers in Kubernetes. With the help of 7ASe

The Open Source Technology Improvement Fund is proud to share the results of our security audit of Kubeflow. Kubeflow functions for building and deploying customizable machine learning workflows in Kubernetes, and has many subprojects able to be implement

The Open Source Technology Improvement Fund is proud to share the results of our security work on the BOLT binary scanner for LLVM. LLVM is an open source compiler for translating human-readable source code for machine-readable hardware. In 2024, Arm engi