These organisations are part of the workgroup.

The Open Source Security Foundation (OpenSSF) is a cross-industry initiative by the Linux Foundation that brings together the industry’s most important open source security initiatives and the individuals and companies that support them. The OpenSSF is committed to collaboration and working both upstream and with existing communities to advance open source security for all. For more information, please visit us at openssf.org.

The Eclipse Foundation provides our global community of individuals and organisations with the industry’s most secure and business-friendly environment for open source software collaboration and innovation. We host the Eclipse IDE, Adoptium, Software Defined Vehicle, Jakarta EE, and over 420 high-impact open source projects. We are dedicated to open source supply chain security through our team of expert security professionals, third-party audits, and our role as a CVE Numbering Authority for effective vulnerability management. Headquartered in Brussels, Belgium, the Eclipse Foundation is an international non-profit association supported by over 360 members.

The OWASP Foundation
Our vision – “No more insecure software.” The Open Worldwide Application Security Project (OWASP) is a nonprofit foundation that works to improve software security. Our programming includes:
- Community-led open-source projects, including code, documentation, and standards
- Over 250+ local chapters worldwide
- Tens of thousands of members and participants
- Industry-leading educational and training conferences
We are an open community dedicated to enabling organizations to conceive, develop, acquire, operate, and maintain applications that can be trusted. Our projects, tools, documents, forums, and chapters are free and open to anyone interested in improving application security. The OWASP Foundation launched on December 1st, 2001, becoming incorporated as a United States non-profit charity on April 21, 2004.
Corporations, foundations, developers, and volunteers have supported the OWASP Foundation and its work for two decades. Donate, become a Member, or a Corporate Supporter today.
OpenForum Europe (OFE) is a not-for-profit, Brussels-based independent think tank which explains the merits of openness in computing to policy makers and communities across Europe. Originally launched in 2002 to accelerate and broaden the use of Open Source Software (OSS) among businesses, consumers and governments, OFE’s focus has since evolved. OFE currently maintains a Policy Research and Development team based in Brussels, which is supported both by our network of partners and supporters, and by specific specialist advisors. The main policy topics that we cover are: Open Source, Open standards, Cybersecurity, Digital Government, Public Procurement, Intellectual Property, Cloud Computing and Internet Policy.

The Sovereign Tech Resilience program takes a holistic approach to protecting critical digital infrastructure. Severe vulnerabilities in open software components have far-reaching consequences, affecting millions of people and impacting software products of all kinds that make use of them. To mitigate these risks and prevent untold damage, it is not enough just to find and fix bugs. We need to take proactive measures to improve the resilience of open digital infrastructure in the face of undiscovered vulnerabilities.
The Sovereign Tech Resilience program is part of the Sovereign Tech Agency.