Loading page
ostif.org
In short: Getting listed on Open Source Technology Improvement Fund is free. Plan for about 45 minutes — there is material to prepare and a review to wait on.
What they ask for: Request an audit for your mature open-source security component, providing maintainer contacts, architecture, threat model, scope, tests, and a remediation commitment.
Request an audit for your mature open-source security component, providing maintainer contacts, architecture, threat model, scope, tests, and a remediation commitment.
Intended for real open-source projects able to collaborate throughout scoping, audit, fixes, disclosure, and publication of the final report; selection and funding are not guaranteed.
Open the submission page on ostif.org and complete its form — that is the "Open submit page" link at the top of this page.
Intended for real open-source projects able to collaborate throughout scoping, audit, fixes, disclosure, and publication of the final report; selection and funding are not guaranteed.
Priority sets the band — this one is do first. Cost (free) and effort (moderate) move it within that band, which puts it in the highest impact tier. The score orders a submission queue. It is not a measure of the site’s domain authority, traffic or quality.