Introducing the Drupal AI Security Initiative: The First Six Weeks
An update on the Drupal AI Security Initiative: how a funded fractional team is leveraging AI tooling to find, triage, and resolve open source security vulnerabilities faster.
Alpha-Omega
The April Task Force: a project for strengthening the CPAN CNA function, and more.
The Perl and Raku Foundation and CPAN Security Group have launched the April Task Force—a $250,000 Alpha-Omega-funded initiative to strengthen CPAN security, streamline CVE processing, and bolster supply chain resilience for Perl ecosystems.
Announcing the New Alpha-Omega Seasonal Grant Program
Alpha-Omega is evolving. We are thrilled to announce our New Seasonal Grant Framework, transitioning to a predictable four-quarter cadence that provides open source maintainers with clear timelines, synchronized community cohorts, and faster funding decisions.
Open Source Security: A Strategy, Not a Cost
Open source software underpins over 90% of modern codebases, yet we heavily rely on volunteer goodwill to secure it. Explore how direct funding initiatives like Alpha-Omega are shifting the paradigm from treating open source security as a cost to implementing it as a core strategy.
PyTorch ExecuTorch Audit Complete!
Discover the results of the PyTorch ExecuTorch security audit conducted by Trail of Bits, supported by Alpha-Omega and OSTIF. Learn about the 42 findings addressed to improve on-device inference security.
Securing the Rust Project Infrastructure with Hardware Security Keys
To bring top-tier, unphishable protection to the Rust Project, the Rust Foundation has mandated hardware security keys as the default for all critical infrastructure access. Read about our vendor evaluation process, rollout strategy, and future security roadmap for hardening the ecosystem.
Join the Fight: Building a Team of Open Source Security Engineers in Residence
Discover how Alpha-Omega is building a global network of Open Source Security Engineers in Residence (SEIR) to support maintainers and secure the ecosystem.
Case Study: From Friction to Flow: How Investment in Apache® Software Foundation (ASF) Tooling is Lowering Barriers for Open Source Maintainers
Open source maintainers are managing increasingly complex release and security requirements. Discover how the Apache® Software Foundation (ASF), supported by Alpha-Omega, is using the new Apache Trusted Releases (ATR) platform to reduce friction, embed usable security like SBOM validation, and make collaboration easier across projects.
Scrutineer: Scanning Open Source Without Flooding Maintainers
Discover Scrutineer, an open source tool built for Alpha-Omega that uses AI to scan repositories for security vulnerabilities while eliminating noise and maintainer alert fatigue.
