Open Source Security Foundation
This is the page you're already on — the Human View toggle above shows it in full.
A green key on the record, left, is one Decision Insights added. It doesn't exist on the company's site or in a wire feed. The same key labels its row on the right, so you can match them directly. More on how DI enriches a record.
This is what the machine sees: the exact JSON-LD an agent receives for this listing.
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/#website",
"@type": "WebSite",
"name": "Decision Insights",
"potentialAction": {
"@type": "SearchAction",
"target": {
"@type": "EntryPoint",
"urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}\u0026submit=1"
}
},
"publisher": {
"@id": "https://decisioninsights.ai/#organization"
},
"url": "https://decisioninsights.ai"
}
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/#organization",
"@type": "Organization",
"contactPoint": {
"@type": "ContactPoint",
"contactType": "customer support",
"email": "[email protected]"
},
"description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
"logo": {
"@type": "ImageObject",
"url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
},
"name": "Decision Insights",
"parentOrganization": {
"@type": "Organization",
"name": "Wiretap Labs",
"sameAs": [
"https://www.linkedin.com/company/wiretap-labs",
"https://www.crunchbase.com/organization/wiretap-labs"
],
"url": "https://wiretaplabs.com"
},
"publishingPrinciples": "https://decisioninsights.ai/standards/",
"sameAs": [
"https://www.linkedin.com/company/decisioninsights"
],
"url": "https://decisioninsights.ai"
}
{
"@context": "https://schema.org",
"@type": "BreadcrumbList",
"itemListElement": [
{
"@type": "ListItem",
"item": "https://decisioninsights.ai",
"name": "Decision Insights",
"position": 1
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/registry/",
"name": "Registry",
"position": 2
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/projects/",
"name": "Projects",
"position": 3
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/registry/linux-foundation/",
"name": "The Linux Foundation",
"position": 4
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/projects/open-source-security-foundation/",
"name": "Open Source Security Foundation",
"position": 5
}
]
}
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/projects/open-source-security-foundation/#project",
"@type": "SoftwareSourceCode",
"additionalProperty": [
{
"@type": "PropertyValue",
"name": "Related projects",
"propertyID": "https://decisioninsights.ai/ns#relatedProjects",
"value": [
{
"@id": "https://decisioninsights.ai/projects/open-source-readiness/#project",
"@type": "SoftwareSourceCode",
"mainEntityOfPage": "https://decisioninsights.ai/projects/open-source-readiness/",
"name": "Open Source Readiness"
},
{
"@id": "https://decisioninsights.ai/projects/open-chain/#project",
"@type": "SoftwareSourceCode",
"mainEntityOfPage": "https://decisioninsights.ai/projects/open-chain/",
"name": "OpenChain"
},
{
"@id": "https://decisioninsights.ai/projects/openchain-security-assurance/#project",
"@type": "SoftwareSourceCode",
"mainEntityOfPage": "https://decisioninsights.ai/projects/openchain-security-assurance/",
"name": "OpenChain Security Assurance"
},
{
"@id": "https://decisioninsights.ai/projects/fossology/#project",
"@type": "SoftwareSourceCode",
"mainEntityOfPage": "https://decisioninsights.ai/projects/fossology/",
"name": "FOSSology"
},
{
"@id": "https://decisioninsights.ai/projects/open-security-controller/#project",
"@type": "SoftwareSourceCode",
"mainEntityOfPage": "https://decisioninsights.ai/projects/open-security-controller/",
"name": "Open Security Controller"
},
{
"@id": "https://decisioninsights.ai/projects/fossbazaar/#project",
"@type": "SoftwareSourceCode",
"mainEntityOfPage": "https://decisioninsights.ai/projects/fossbazaar/",
"name": "FOSSBazaar"
},
{
"@id": "https://decisioninsights.ai/projects/open-compliance-program/#project",
"@type": "SoftwareSourceCode",
"mainEntityOfPage": "https://decisioninsights.ai/projects/open-compliance-program/",
"name": "Open Compliance Program"
},
{
"@id": "https://decisioninsights.ai/projects/openswitch/#project",
"@type": "SoftwareSourceCode",
"mainEntityOfPage": "https://decisioninsights.ai/projects/openswitch/",
"name": "OpenSwitch"
}
]
},
{
"@type": "PropertyValue",
"name": "Related organizations",
"propertyID": "https://decisioninsights.ai/ns#relatedOrganizations",
"value": [
{
"@id": "https://decisioninsights.ai/registry/fortress-information-security/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/fortress-information-security/",
"name": "Fortress Information Security"
},
{
"@id": "https://decisioninsights.ai/registry/lineaje/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/lineaje/",
"name": "Lineaje"
},
{
"@id": "https://decisioninsights.ai/registry/black-duck-inn/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/black-duck-inn/",
"name": "Black Duck Inn"
},
{
"@id": "https://decisioninsights.ai/registry/fossa/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/fossa/",
"name": "FOSSA"
},
{
"@id": "https://decisioninsights.ai/registry/insignary/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/insignary/",
"name": "Insignary"
},
{
"@id": "https://decisioninsights.ai/registry/native-security/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/native-security/",
"name": "Native Security"
},
{
"@id": "https://decisioninsights.ai/registry/google-open-source/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/google-open-source/",
"name": "Google Open Source"
},
{
"@id": "https://decisioninsights.ai/registry/interos/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/interos/",
"name": "Interos"
}
]
}
],
"alternateName": [
"OpenSSF"
],
"author": {
"@id": "https://decisioninsights.ai/registry/linux-foundation/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/linux-foundation/",
"name": "The Linux Foundation"
},
"dateModified": "2026-08-27T03:10:35Z",
"description": "Open Source Security Foundation (OpenSSF) is a Linux Foundation initiative for open source software supply chain security.",
"keywords": [
"Open Source",
"Cloud",
"Compliance",
"Components",
"Enterprise",
"Industry",
"IT Governance",
"Open Source",
"Open Source Program Office",
"Software",
"Supply Chain",
"Supply Chain Risk Management",
"Third-Party Risk Management",
"Vulnerabilities"
],
"knowsAbout": [
{
"@id": "https://decisioninsights.ai/term/cybersecurity/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/cybersecurity/",
"name": "Cybersecurity"
},
{
"@id": "https://decisioninsights.ai/term/cloud/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/cloud/",
"name": "Cloud"
},
{
"@id": "https://decisioninsights.ai/term/compliance/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/compliance/",
"name": "Compliance"
},
{
"@id": "https://decisioninsights.ai/term/components/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/components/",
"name": "Components"
},
{
"@id": "https://decisioninsights.ai/term/enterprise/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/enterprise/",
"name": "Enterprise"
},
{
"@id": "https://decisioninsights.ai/term/industry/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/industry/",
"name": "Industry"
},
{
"@id": "https://decisioninsights.ai/term/it-governance/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/it-governance/",
"name": "IT Governance"
},
{
"@id": "https://decisioninsights.ai/term/open-source/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/open-source/",
"name": "Open Source"
},
{
"@id": "https://decisioninsights.ai/term/open-source-program-office-ospo/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/open-source-program-office-ospo/",
"name": "Open Source Program Office"
},
{
"@id": "https://decisioninsights.ai/term/software/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/software/",
"name": "Software"
},
{
"@id": "https://decisioninsights.ai/term/supply-chain/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/supply-chain/",
"name": "Supply Chain"
},
{
"@id": "https://decisioninsights.ai/term/supply-chain-risk-management-scrm/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/supply-chain-risk-management-scrm/",
"name": "Supply Chain Risk Management"
},
{
"@id": "https://decisioninsights.ai/term/third-party-risk-management-tprm/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/third-party-risk-management-tprm/",
"name": "Third-Party Risk Management"
},
{
"@id": "https://decisioninsights.ai/term/vulnerabilities/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/vulnerabilities/",
"name": "Vulnerabilities"
}
],
"mainEntityOfPage": "https://decisioninsights.ai/projects/open-source-security-foundation/",
"maintainer": {
"@id": "https://decisioninsights.ai/registry/linux-foundation/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/linux-foundation/",
"name": "The Linux Foundation"
},
"name": "Open Source Security Foundation",
"publisher": {
"@id": "https://decisioninsights.ai/registry/linux-foundation/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/linux-foundation/",
"name": "The Linux Foundation"
},
"url": "https://openssf.org"
}
Topic graph
A wire service tags a release with a category, once. It doesn't maintain a durable graph over time. We connect them to a topic graph an agent can query.
Counted facts
A protocol or open source project keeps no vendor list and publishes no figures of its own to check this against. This counts how it actually shows up across the graph -- articles that name it, the organizations named alongside it in those articles, similar projects, and organizations whose topic tags overlap with its own -- computed, not curated.