So You Got Your First GHSA. Don’t Panic.
Learn how to confidently handle your first GitHub Security Advisory (GHSA) with this step-by-step guide for open source maintainers, covering everything from initial triage to publishing the fix.
Alpha-Omega
256 Advisories in Five Months: Results from the Drupal AI Security Initiative
Discover how the Drupal AI Security Initiative and SEIR grant successfully managed a massive surge of 256 AI-assisted security advisories in just five months.
A safety net for eBPF: adding KASAN support to JITed programs
While eBPF technology continues to gain traction, the BPF verifier isn't entirely foolproof. Learn how a new initiative brings Kernel Address Sanitizer (KASAN) support to eBPF JIT-compiled programs on x86_64 to detect memory-safety issues and secure the Linux kernel.
Mbed-TLS Audit Complete!
The Open Source Technology Improvement Fund is proud to share the results of our Mbed-TLS security audit, conducted in partnership with Quarkslab and Alpha-Omega to review the version 3.x to 4.0 architecture split.
Fewer keys under the doormat: why trusted publishing matters for Open VSX
Trusted publishing is now available on the Open VSX Registry. Discover why moving away from vulnerable long-lived personal access tokens and adopting short-lived workload identity is critical for software supply chain security.
vLLM audit complete!
The results of the security audit for vLLM, funded by Alpha-Omega and executed by X41-DSec in partnership with OSTIF, are now complete, highlighting key findings, security improvements, and recommendations for the open source AI project.
Securing Open Source Together: Highlights from Our Alpha-Omega Roundtable at OSS EU 2026
Explore key takeaways from the Alpha-Omega roundtable at OSS EU 2026, featuring discussions on open source cybersecurity, SEIRs, criticality cohorts, and project sustainability.
Reducing slop LLM reports by documenting your project’s intended use case
Learn how documenting your software project's intended use case can drastically reduce low-quality, noisy LLM security reports and improve AI scan accuracy.
