Notary Project Cryptography Audit Complete!

OSTIF is proud to share the results of our second security audit of Notary Project. Notary Project is “a set of specifications and tools intended to provide a cross-industry standard for securing software supply chains by using authentic container images and other OCI artifacts.”* With the help of Quarkslab and…

Continue ReadingNotary Project Cryptography Audit Complete!

Karmada Audit Complete!

OSTIF is proud to share the results of our security audit of Karmada. Karmada is an open source Kubernetes orchestration system for running cloud-native applications seamlessly across different clouds and clusters. With the help of Shielder and the Cloud Native Computing Foundation (CNCF), this project offers users improved open, multi-cloud,…

Continue ReadingKarmada Audit Complete!

2024 Sovereign Tech Agency/OSTIF Audit Impact Report

Open Source Technology Improvement Fund (OSTIF) is proud to share the results of our 2024 security audit collaboration with the Sovereign Tech Agency. The Sovereign Tech Agency has invested millions of Euros into technology improvement and hardening over the past two years, notably through their Sovereign Tech Resilience program. OSTIF…

Continue Reading2024 Sovereign Tech Agency/OSTIF Audit Impact Report