Achieving Positive Outcomes Across Ecosystems - Security Audits in Action

Learn how security audits drive positive outcomes across cloud native ecosystems through this 17-minute conference talk examining over four years of successful security audit engagements between CNCF projects and the Open Source Technology Improvement Fund (OSTIF). Discover how OSTIF, a nonprofit organization dedicated to working directly with open source projects and their maintainers, champions security improvements by applying best practices of expert third-party review. Explore the methodologies and approaches used to enhance the security posture of cloud native projects, understand the collaborative process between auditors and project maintainers, and gain insights into how systematic security reviews contribute to strengthening the broader open source ecosystem. Examine real-world examples of audit outcomes and learn how these partnerships create lasting security improvements that benefit the entire cloud native community.