Linux Foundation

At the heart of the Open Source Security Foundation (OpenSSF) is a culture of collaboration and a mission to make open source software (OSS) universally trusted, secure, and reliable. We envision a future where individuals and organizations across a global ecosystem can confidently leverage the benefits of OSS and meaningfully contribute back to its vibrant community. The OpenSSF serves as a trusted partner to affiliated open source foundations and projects, providing valuable guidance and artifacts, such as the top ten Secure Software Development Guiding Principles, to encourage security by design and by default. Our initiatives are geared towards making security easier for open source maintainers and contributors, while consumers of OSS can utilize our outputs for clear, consistent, and trusted signals to better understand the security profile of OSS content.

OpenSSF is committed to fostering an environment that embraces all perspectives and backgrounds, ensuring equitable opportunities for global mentorship and education. We believe that diversity, equity, and inclusion are not just advocacy points but are integral to building robust and sustainable security solutions. Our core values include upholding the security of open source as a public good, maintaining openness and transparency in all our work, prioritizing the needs of maintainers, and operating with neutrality and empathy. We strive to be an influential advocate for mutually beneficial external efforts and an educator for policy decision-makers. By facilitating collaboration among OSS communities, security experts, and industry stakeholders, we aim to sustainably address open source software security challenges with transparent operations and governance. The OpenSSF is dedicated to continuously evolving these efforts to bring more inclusive and diverse software security education, ensuring all stakeholders have opportunities to engage in and receive value from our technical initiatives.