OSTIF Official

Non-profit org that connects open-source projects with security resources. We are the Open Source Technology Improvement Fund.

[OSTIF Official @OSTIFofficial]

Thanks to @ShielderSec and the @CloudNativeFdn, this project received a custom security audit of its non-core components.

https://t.co/S6etV37zwk

[OSTIF Official @OSTIFofficial]

The Open Source Technology Improvement Fund is proud to share the results of our security audit of Kubernetes. Kubernetes is a widely-adopted production-grade open source container management and orchestration platform.

#audit #OSTIF #CNCF #Kubernetes

[FHE.org @fhe_org]

Cryptography has never mattered more.

As AI and sensitive data grow together, who gets to see what is a central question. FHE offers an answer: computing on data that stays encrypted.

Since 2020, https://t.co/7LomLmwWJj has grown from one meetup into a global community 👇

[OSTIF Official @OSTIFofficial]

Existing tools offer considerable power — but should mastering that machinery be the price of admission?"

[OSTIF Official @OSTIFofficial]

"Virtually all privacy depends on well-designed cryptographic protocols, yet a person working in security should be able to examine a protocol without having to become a formal-methods specialist first.

[OSTIF Official @OSTIFofficial]

Join us for Cryptographic Protocol Analysis for the Rest of Us w/ @kaepora

https://t.co/SkWkxNHviw

#OSTIF #meetups #verifpal #cryptography

[OSTIF Official @OSTIFofficial]

With the help of @quarkslab and @AlphaOmegaOSS, this project underwent an architecture security review of the version 3.x to 4.0 split.

https://t.co/uUjevbbrq1

#audit #OSTIF #mbed-tls #alpha-omega #quarkslab

[OSTIF Official @OSTIFofficial]

@OSTIFofficial is proud to share the results of our security audit of Mbed-TLS. Mbed-TLS is a widely used TLS, DLS, and X.509 open source cryptographic library.

#audit #OSTIF #mbed-tls #alpha-omega #quarkslab

[OSTIF Official @OSTIFofficial]

With the help of Shielder and LF-Energy, this project underwent custom security review with additional threat model assessment and tooling campaign.

Read about it here! https://t.co/sNn9BADLhE

[OSTIF Official @OSTIFofficial]

The Open Source Technology Improvement Fund is proud to share the results of our security audit of Power Grid Model. Power Grid Model is an open source library for steady-state distribution power system analysis.

#OSTIF #lfenergy #Shielder #audit

[OSTIF Official @OSTIFofficial]

Thanks to the support from the Sovereign Tech Agency, there is now a source code audit and supplemental supply-chain security review.

Read about it here! https://t.co/jcHtMA3z32

#OSTIF #Scala3 #Scala

[OSTIF Official @OSTIFofficial]

In 2025, OSTIF advocated alongside the Scala project for funding of a security maintenance program. It took over a year of meetings and proposals to procure support, but the Scala team was ready and eager to work on holistically improving the security posture of the project.

[OSTIF Official @OSTIFofficial]

We're proud to share the results of our security audit of vLLM. vLLM is an open source Python library for Language Learning Machines (LLMs), running interference for large LLMs quickly and efficiently.

Read about it here! https://t.co/dIjsx37iqw

#OSTIF #vLLM #X41DSec

[OSTIF Official @OSTIFofficial]

Our Q3 026 Community Spotlight is Sarah Gran! Sarah works as the VP of Advancement for the Internet Security Research Group.

Read more about her work in open source in her own words.

https://t.co/oWN9232ZfV

#OSTIF #spotlight #ISRP

[OSTIF Official @OSTIFofficial]

Thanks to @ShielderSec and the @sovtechagency, this project received custom security review, documentation, and testing to harden and inform development as the project moves forward.

Read about it here! https://t.co/kDFNViZRdc

[OSTIF Official @OSTIFofficial]

@OSTIFofficial is proud to share the results of our security audit of louis-rs. louis-rs is a Rust rewrite of Liblouis, a set of open source braille translator and backtranslator libraries written in C.
#louis-rs #liblouis #braille #ostif #sovereignTechAgency #shielder

[OSTIF Official @OSTIFofficial]

We published our 100th security audit earlier this year.

Read more here: https://t.co/peQGml7X9O

[OSTIF Official @OSTIFofficial]

Here’s a catch-up of @OSTIFofficial 2026 so far and our plans to cap out the year.

https://t.co/xiNX39KOzV

#OSTIF

[OSTIF Official @OSTIFofficial]

https://t.co/auIG6xgWbL

[OSTIF Official @OSTIFofficial]

Take a look at @OSTIFofficial 's role in the Security Engineer in Residence (SEiR) program.

#SEiR #V-LAT #OSTIF

[OSTIF Official @OSTIFofficial]

Project V-LAT is a team of 6 researchers triaging and fixing vulnerabilities across underserved projects, currently working through a backlog of about 450 issues, plus how similar programs are being funded across Rust, Ruby, PHP, Node.js, FreeBSD, and Drupal.