CNCF & OpenSSF Announce Open Source SecurityCon 2025
The Cloud Native Computing Foundation (CNCF) and the Open Source Security Foundation (OpenSSF) are thrilled to introduce Open Source SecurityCon 2025—a premier event focused on strengthening cloud-native and open source software security. This one-day conference, set…
Announcing the Kubernetes “Shift Down” Security Paper
The CNCF Kubernetes Policy Working group (WG) has just released the Shift Down Security paper to help educate the community about how organizations can leverage cloud native security best practices to address key business risks and…
OSTIF Announces Linkerd Security Audit Results
The Open Source Technology Improvement Fund (OSTIF) is proud to share the results of our security audit of Linkerd. Linkerd is an open source service mesh for Kubernetes which prioritizes reliability, security, and simplicity. Thanks to…
How to manage three top Kubernetes security vulnerabilities
This article explains: Kubernetes and security Across various organizations, Kubernetes is being adopted at lightning rates. It is estimated that 60% of organizations have adopted this technology, and the list of companies planning on transitioning to…
Announcing the results of the Karmada security audit
Community post cross-posted on the OSTIF blog by Helen Woeste, Communications Manager, the Open Source Technology Improvement Fund OSTIF is proud to share the results of our security audit of Karmada. Karmada is an open source…
Unlocking cloud native security with Cilium and eBPF
Ambassador post originally published on Dev.to by Syed Asad Raza Introduction 🌐🔒🚀 As cloud-native applications scale, securing workloads while maintaining performance becomes critical. This is where Cilium, an open-source networking, observability, and security tool, shines. Backed…
CNCF On demand webinar: Security and performance optimization with the API gateway
In today’s distributed systems, APIs form the backbone of software architecture. This presentation will explore how Kong Gateway’s powerful tools can be leveraged to ensure API management security, scalability, and performance optimization.
Cloud Native Live: Level up your database security
Whether you’re running databases on-prem, in the cloud, or in containers, managing permissions throughout the development lifecycle and ensuring least-privilege access for each service can feel like an endless puzzle for platform engineers. In this livestream,…
Continued security improvements to CNCF projects with OSTIF audits
The Open Source Technology Improvement Fund, Inc (OSTIF) is thrilled to mark another successful year of helping CNCF projects with security audits. Since this partnership began in 2021, a total of 13 projects have graduated following…