Open Source Security Foundation

Here is Open Source Security Foundation in plain terms. Non-profit, supply chain security, open source software. The job it does: building software for you when nothing off the shelf fits.

It makes the most sense for companies with a specific process to automate. They are a small team, 11 to 50 people, which usually shapes who they work with. Small vendors mean quick answers and real influence on the roadmap, but check who covers support when someone is out.

Open Source Security Foundation is based in San Francisco, California. You can read more at openssf.org.

Things worth asking about: portfolio relevance, who owns the code, and how they handle changes. Ask for a trial on your own data, not a canned demo.

If you have worked with Open Source Security Foundation, tell the next buyer what you paid and what surprised you. That is the part of this page we cannot write.