@OSTIFofficial

Non-profit org that connects open-source projects with security resources. We are the Open Source Technology Improvement Fund.

 Chicago, IL
ostif.org
Joined May 2015
  • Tweets988
  • Following801
  • Followers1.8K
167Media
@OSTIFofficial is proud to share the results of our security audit of Mbed-TLS. Mbed-TLS is a widely used TLS, DLS, and X.509 open source cryptographic library. #audit #OSTIF #mbed-tls #alpha-omega #quarkslab
1
1
1
76
With the help of @quarkslab and @AlphaOmegaOSS, this project underwent an architecture security review of the version 3.x to 4.0 split. ostif.org/mbed-tls-audit-com… #audit #OSTIF #mbed-tls #alpha-omega #quarkslab
1
1
39
The Open Source Technology Improvement Fund is proud to share the results of our security audit of Power Grid Model. Power Grid Model is an open source library for steady-state distribution power system analysis. #OSTIF #lfenergy #Shielder #audit
1
61
With the help of Shielder and LF-Energy, this project underwent custom security review with additional threat model assessment and tooling campaign. Read about it here! ostif.org/power-grid-model-a…
25
In 2025, OSTIF advocated alongside the Scala project for funding of a security maintenance program. It took over a year of meetings and proposals to procure support, but the Scala team was ready and eager to work on holistically improving the security posture of the project.
1
1
1
97
Thanks to the support from the Sovereign Tech Agency, there is now a source code audit and supplemental supply-chain security review. Read about it here! ostif.org/scala3-supply-chai… #OSTIF #Scala3 #Scala
23
We're proud to share the results of our security audit of vLLM. vLLM is an open source Python library for Language Learning Machines (LLMs), running interference for large LLMs quickly and efficiently. Read about it here! ostif.org/vllm-audit-complet… #OSTIF #vLLM #X41DSec
2
101
Our Q3 026 Community Spotlight is Sarah Gran! Sarah works as the VP of Advancement for the Internet Security Research Group. Read more about her work in open source in her own words. ostif.org/q3-2026-community-… #OSTIF #spotlight #ISRP
62
@OSTIFofficial is proud to share the results of our security audit of louis-rs. louis-rs is a Rust rewrite of Liblouis, a set of open source braille translator and backtranslator libraries written in C. #louis-rs #liblouis #braille #ostif #sovereignTechAgency #shielder
1
137
Thanks to @ShielderSec and the @sovtechagency, this project received custom security review, documentation, and testing to harden and inform development as the project moves forward. Read about it here! ostif.org/louis-rs-audit-com…
42
We published our 100th security audit earlier this year. Read more here: ostif.org/100th-audit-public…
1
1
3
911
Here’s a catch-up of @OSTIFofficial 2026 so far and our plans to cap out the year. ostif.org/2026-a-very-early-… #OSTIF
58
Take a look at @OSTIFofficial 's role in the Security Engineer in Residence (SEiR) program. #SEiR #V-LAT #OSTIF
1
77
more replies
Project V-LAT is a team of 6 researchers triaging and fixing vulnerabilities across underserved projects, currently working through a backlog of about 450 issues, plus how similar programs are being funded across Rust, Ruby, PHP, Node.js, FreeBSD, and Drupal.
1
1
41
ostif.org/security-engineer-…
17
We just published our AI Use in Security Research Policy, outlining how we and our contractors are expected to use AI responsibly in security engagements. Read the full policy to see our standards on transparency, data handling, and disclosure. #OSTIF #AI #POLICY
1
1
384
ostif.org/ostif-ai-use-in-se…
33
@OSTIFofficial is proud to share the results of our security audit of Scala, executed by a team of three auditors from Quarkslab. We want to thank our very own Derek Zimmer of OSTIF for advocating for this audit for a long time! #OSTIF #Quarkslab #SovereignTechAgency #Scala
1
2
10
1,953
See the whole blog and report at ostif.org/scala-audit-comple…
76
Load more