OSI works with developers, policymakers, governments, companies, and the broader technology community to promote policies and practices that strengthen the security of Open Source while preserving the freedoms that make collaborative software development possible.
Our policy work
OSI works with policymakers and stakeholders to provide technical and legal expertise on Open Source and cybersecurity. Our work includes:
- Responding to government consultations and requests for information on cybersecurity and software security.
- Educating legislators, regulators, and standards organizations about the role of Open Source in secure software ecosystems.
- Publishing policy papers, analysis, and recommendations on cybersecurity, software supply chains, and vulnerability management.
- Participating in international forums and multistakeholder initiatives focused on cybersecurity and digital resilience.
- Working with Open Source developers, researchers, companies, nonprofits, and other organizations to understand and address cybersecurity challenges.
- Monitoring emerging cybersecurity legislation, regulation, and standards affecting Open Source.
Resources
- EU AI Act and CRA: Timelines and Resources
- State of the Source at ATO 2025: Cybersecurity
- OSI at the Open Source Founders Summit: supporting entrepreneurs to build a business with Open Source
Position
- Keeping Europe safe and advancing Open Source: OSI provides feedback to the EU Cybersecurity Act
- Investing in Open Source sustainability: OSI supports OpenForum Europe’s EU Sovereign Tech Fund proposal
Recent activities
-
EU AI Act and CRA: Timelines and Resources
-
Open Source at the Heart of Europe’s (and the World’s) Digital Future
-
Open Policy Alliance Welcomes the Open Source Technology Improvement Fund as New Member
-
Help us improve the EU Cyber Resilience Act Standards!
