Achieving Positive Outcomes Across Ecosystems: Security Audits in Action - Amir Montazery

Presenters Amir Montazery Source OpenSource SecurityCon NA 2025 Fortifying the Digital Frontier: A Decade of Open-Source Security Audits 🛡️✨ Open-source software is the bedrock of our digital world, powering everything from your favorite apps to critical infrastructure. But with great power comes great responsibility, especially when it comes to security. Amir Montazeri, Managing Director of the Open-Source Technology Improvement Fund (OTF), recently shared invaluable insights into how we can collectively bolster the security of these essential projects. Celebrating its 10th anniversary, OTF is at the forefront of this crucial mission, and their work with the Cloud Native Computing Foundation (CNCF) is a shining example of what can be achieved through dedicated collaboration. ...

November 24, 2025 · 4 min

Lightning Talk: AIxCC Results and New Open Source AI Projects To Help Secure Open Sou... Jeff Diecks

Presenters Jeff Diecks Source OpenSource SecurityCon NA 2025 AI Cyber Challenge: Revolutionizing Open Source Security with Intelligent Automation 🚀 The world of open-source software is the backbone of our digital infrastructure, but it’s also a prime target for cyber threats. For years, the challenge has been not just finding vulnerabilities, but fixing them efficiently. Enter the AI Cyber Challenge (AICC), a groundbreaking initiative that brought together cutting-edge AI and the open-source community to tackle this critical problem head-on. ...

November 24, 2025 · 5 min

Lightning Talk: Baking a Security Community From Scratch - Helen Woeste

Presenters Helen Woeste Source OpenSource SecurityCon NA 2025 Beyond the Bake-Off: Crafting Thriving Open Source Communities 🚀 Ever dreamt of building a bustling, engaged open source community? It might sound like a daunting task, but what if we told you the secret sauce is surprisingly similar to what goes into a perfect Victoria sponge? Helen Wuesty from the Open Source Technology Improvement Fund (OSTIF) shared some brilliant insights at a recent tech conference, drawing a delightful parallel to the beloved Great British Bake Off. Her “recipe” is all about moving beyond just existing to actively cultivating advocates and fostering deep, meaningful engagement. ...

November 24, 2025 · 4 min

We're All Consumers (And That's Dandy) - Evan Anderson, Custcodian LLC

Presenters Evan Anderson Source OpenSource SecurityCon NA 2025 Level Up Your Open Source Security: Introducing the OpenSSF Security Baseline 🚀 The world of technology is buzzing with innovation, but with great power comes great responsibility – especially when it comes to security! In today’s digital landscape, keeping our software secure isn’t just a good idea; it’s becoming a legal imperative. And when it comes to the open source projects that form the backbone of so much of our digital infrastructure, ensuring their health and security is a collective mission. That’s where the OpenSSF Security Baseline steps in, offering a guiding light for a more robust and sustainable open source future. ✨ ...

November 24, 2025 · 6 min

From Gatekeepers To Enablers: Empowering Developers With ApplicationSets - Ido Ziv & Adi Ziv

Presenters Ido Ziv Adi Ziv Source ArgoCon NA 2025 From “App of Apps” Chaos to Scalable GitOps: A Kaltura Success Story 🚀 Navigating the complexities of managing a vast application landscape is a challenge many organizations face as they embrace GitOps. Kaltura, a growing company, found themselves at a critical juncture, managing over 2,000 production applications across dozens of cloud regions. Their initial approach, while effective for smaller deployments, was quickly becoming a significant bottleneck. Let’s dive into how they transformed their Argo CD operations from a monolithic headache to a streamlined, scalable powerhouse! 💡 ...

November 24, 2025 · 6 min