Managing Audits for Critical Open Source Projects

Explore the process of managing security audits for critical open source projects in this 39-minute conference talk by Amir Montazery from the Open Source Technology Improvement Fund, Inc (OSTIF). Gain insights into OSTIF's seven-year experience facilitating and managing security audits, resulting in the discovery and patching of over 30 Critical/High vulnerabilities. Learn about the refined process for connecting security experts with project maintainers to holistically improve security posture, and understand the importance of these audits in maintaining the integrity of open source software.