OSTIF is proud to share the results of our 2024 security audit collaboration with the Cloud Native Computing Foundation (CNCF).

Over the past three years, OSTIF and the CNCF have worked together to provide security audits for CNCF projects. These projects, as a part of the CNCF landscape, must undergo a security audit to be considered qualified to move from Incubating to Graduated status. Thirteen projects so far have graduated following an OSTIF security audit, with many more to come.

The 2024 CNCF_OSTIF Impact Report details the audit work performed in the calendar year 2024. For audit-specific details, see our Audit Reports or the References page at the end of the report.

Read the CNCF’s blog about this report HERE.