Securing the Agentic Future: How OpenSSF Is Leading AI Security

Why It Matters

OpenSSF’s AI‑security agenda will shape standards, funding, and regulations that protect the open‑source supply chain, directly impacting enterprises and developers worldwide.

Key Takeaways

• OpenSSF focuses on securing open source through programs, community, education, policy.
• AI security now central; OpenSSF aims to be hub for stakeholders.
• New AI initiatives include ebook, mentorship, ambassador program, and partnerships.
• OpenSSF will influence AI policy in Europe and Washington, shaping regulations.
• Funding sustainability and CRA compliance are top priorities for 2026 roadmap.

Summary

The Open Source Security Foundation (OpenSSF) announced a strategic push into AI security, reaffirming its core mission to protect open‑source software. The foundation operates around four pillars—programs and projects, community building, targeted education, and policy advocacy—and is now extending each pillar to address emerging AI risks.

Speakers highlighted a dramatic shift from last year’s “wild‑west” AI rollout to a security‑first mindset. OpenSSF is positioning itself as the central hub where enterprises, governments, and developers can collaborate on best practices, tooling, and standards, while actively shaping AI‑related regulations in Europe and Washington.

Concrete wins were showcased: a newly published AI security ebook, a mentorship program, the launch of ambassador initiatives, and ongoing collaborations such as the Mythos project. The foundation also emphasized progress on the Cyber Resilience Act (CRA) and efforts to build sustainable funding models.

Looking ahead, OpenSSF’s roadmap for 2026 prioritizes AI‑focused education, supply‑chain hardening, and deeper policy engagement. By uniting disparate stakeholders, the foundation aims to turn vulnerability discovery into proactive remediation, ensuring the open‑source ecosystem remains resilient as AI becomes integral to software development.

Original Description

Keynote: Securing the Agentic Future: How OpenSSF is Leading the AI Security Transition - Steven Fernandez, OpenSSF Managing Director, The Linux Foundation

As AI becomes a bigger part of software and open source development, security needs are changing quickly. This talk will cover how the Open Source Security Foundation is ramping up the use of and support for AI security across the open source ecosystem.