Skip to main content

OpenChain Security Assurance

Human View Machine View

This is the page you're already on — the Human View toggle above shows it in full.

A green key on the record, left, is one Decision Insights added. It doesn't exist on the company's site or in a wire feed. The same key labels its row on the right, so you can match them directly. More on how DI enriches a record.

The record

This is what the machine sees: the exact JSON-LD an agent receives for this listing.

WebSite 
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/#website",
  "@type": "WebSite",
  "name": "Decision Insights",
  "potentialAction": {
    "@type": "SearchAction",
    "target": {
      "@type": "EntryPoint",
      "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}\u0026submit=1"
    }
  },
  "publisher": {
    "@id": "https://decisioninsights.ai/#organization"
  },
  "url": "https://decisioninsights.ai"
}
Organization 
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/#organization",
  "@type": "Organization",
  "contactPoint": {
    "@type": "ContactPoint",
    "contactType": "customer support",
    "email": "[email protected]"
  },
  "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
  "logo": {
    "@type": "ImageObject",
    "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
  },
  "name": "Decision Insights",
  "parentOrganization": {
    "@type": "Organization",
    "name": "Wiretap Labs",
    "sameAs": [
      "https://www.linkedin.com/company/wiretap-labs",
      "https://www.crunchbase.com/organization/wiretap-labs"
    ],
    "url": "https://wiretaplabs.com"
  },
  "publishingPrinciples": "https://decisioninsights.ai/standards/",
  "sameAs": [
    "https://www.linkedin.com/company/decisioninsights"
  ],
  "url": "https://decisioninsights.ai"
}
BreadcrumbList 
{
  "@context": "https://schema.org",
  "@type": "BreadcrumbList",
  "itemListElement": [
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai",
      "name": "Decision Insights",
      "position": 1
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/registry/",
      "name": "Registry",
      "position": 2
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/projects/",
      "name": "Projects",
      "position": 3
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/registry/openchain-project/",
      "name": "OpenChain Project",
      "position": 4
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/projects/openchain-security-assurance/",
      "name": "OpenChain Security Assurance",
      "position": 5
    }
  ]
}
SoftwareSourceCode 
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/projects/openchain-security-assurance/#project",
  "@type": "SoftwareSourceCode",
  "additionalProperty": [
    {
      "@type": "PropertyValue",
      "name": "Related projects",
      "propertyID": "https://decisioninsights.ai/ns#relatedProjects",
      "value": [
        {
          "@id": "https://decisioninsights.ai/projects/open-chain/#project",
          "@type": "SoftwareSourceCode",
          "mainEntityOfPage": "https://decisioninsights.ai/projects/open-chain/",
          "name": "OpenChain"
        },
        {
          "@id": "https://decisioninsights.ai/projects/openchain-iso-5230/#project",
          "@type": "SoftwareSourceCode",
          "mainEntityOfPage": "https://decisioninsights.ai/projects/openchain-iso-5230/",
          "name": "OpenChain ISO 5230"
        },
        {
          "@id": "https://decisioninsights.ai/projects/open-source-security-foundation/#project",
          "@type": "SoftwareSourceCode",
          "mainEntityOfPage": "https://decisioninsights.ai/projects/open-source-security-foundation/",
          "name": "Open Source Security Foundation"
        },
        {
          "@id": "https://decisioninsights.ai/projects/open-security-controller/#project",
          "@type": "SoftwareSourceCode",
          "mainEntityOfPage": "https://decisioninsights.ai/projects/open-security-controller/",
          "name": "Open Security Controller"
        },
        {
          "@id": "https://decisioninsights.ai/projects/open-compliance-program/#project",
          "@type": "SoftwareSourceCode",
          "mainEntityOfPage": "https://decisioninsights.ai/projects/open-compliance-program/",
          "name": "Open Compliance Program"
        },
        {
          "@id": "https://decisioninsights.ai/projects/ocp-security/#project",
          "@type": "SoftwareSourceCode",
          "mainEntityOfPage": "https://decisioninsights.ai/projects/ocp-security/",
          "name": "OCP Security"
        },
        {
          "@id": "https://decisioninsights.ai/projects/open-source-readiness/#project",
          "@type": "SoftwareSourceCode",
          "mainEntityOfPage": "https://decisioninsights.ai/projects/open-source-readiness/",
          "name": "Open Source Readiness"
        },
        {
          "@id": "https://decisioninsights.ai/projects/chaoss/#project",
          "@type": "SoftwareSourceCode",
          "mainEntityOfPage": "https://decisioninsights.ai/projects/chaoss/",
          "name": "CHAOSS"
        }
      ]
    },
    {
      "@type": "PropertyValue",
      "name": "Related organizations",
      "propertyID": "https://decisioninsights.ai/ns#relatedOrganizations",
      "value": [
        {
          "@id": "https://decisioninsights.ai/registry/black-duck-inn/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/black-duck-inn/",
          "name": "Black Duck Inn"
        },
        {
          "@id": "https://decisioninsights.ai/registry/native-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/native-security/",
          "name": "Native Security"
        },
        {
          "@id": "https://decisioninsights.ai/registry/fossa/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/fossa/",
          "name": "FOSSA"
        },
        {
          "@id": "https://decisioninsights.ai/registry/insignary/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/insignary/",
          "name": "Insignary"
        },
        {
          "@id": "https://decisioninsights.ai/registry/lineaje/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/lineaje/",
          "name": "Lineaje"
        },
        {
          "@id": "https://decisioninsights.ai/registry/oligo-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/oligo-security/",
          "name": "Oligo Security"
        },
        {
          "@id": "https://decisioninsights.ai/registry/fortress-information-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/fortress-information-security/",
          "name": "Fortress Information Security"
        },
        {
          "@id": "https://decisioninsights.ai/registry/linux-foundation/cloud-native-computing-foundation-cncf/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/linux-foundation/cloud-native-computing-foundation-cncf/",
          "name": "Cloud Native Computing Foundation (CNCF)"
        }
      ]
    }
  ],
  "author": {
    "@id": "https://decisioninsights.ai/registry/openchain-project/#organization",
    "@type": "Organization",
    "mainEntityOfPage": "https://decisioninsights.ai/registry/openchain-project/",
    "name": "OpenChain Project"
  },
  "dateModified": "2026-08-27T03:10:34Z",
  "description": "OpenChain Security Assurance defines a process-based specification for open source security assurance in the software supply chain.",
  "keywords": [
    "Standard",
    "Certification",
    "Compliance",
    "Components",
    "IT Governance",
    "Open Source",
    "Software",
    "Supply Chain",
    "Supply Chain Risk Management"
  ],
  "knowsAbout": [
    {
      "@id": "https://decisioninsights.ai/term/cybersecurity/#definedterm",
      "@type": "DefinedTerm",
      "mainEntityOfPage": "https://decisioninsights.ai/term/cybersecurity/",
      "name": "Cybersecurity"
    },
    {
      "@id": "https://decisioninsights.ai/term/certification/#definedterm",
      "@type": "DefinedTerm",
      "mainEntityOfPage": "https://decisioninsights.ai/term/certification/",
      "name": "Certification"
    },
    {
      "@id": "https://decisioninsights.ai/term/compliance/#definedterm",
      "@type": "DefinedTerm",
      "mainEntityOfPage": "https://decisioninsights.ai/term/compliance/",
      "name": "Compliance"
    },
    {
      "@id": "https://decisioninsights.ai/term/components/#definedterm",
      "@type": "DefinedTerm",
      "mainEntityOfPage": "https://decisioninsights.ai/term/components/",
      "name": "Components"
    },
    {
      "@id": "https://decisioninsights.ai/term/it-governance/#definedterm",
      "@type": "DefinedTerm",
      "mainEntityOfPage": "https://decisioninsights.ai/term/it-governance/",
      "name": "IT Governance"
    },
    {
      "@id": "https://decisioninsights.ai/term/open-source/#definedterm",
      "@type": "DefinedTerm",
      "mainEntityOfPage": "https://decisioninsights.ai/term/open-source/",
      "name": "Open Source"
    },
    {
      "@id": "https://decisioninsights.ai/term/software/#definedterm",
      "@type": "DefinedTerm",
      "mainEntityOfPage": "https://decisioninsights.ai/term/software/",
      "name": "Software"
    },
    {
      "@id": "https://decisioninsights.ai/term/supply-chain/#definedterm",
      "@type": "DefinedTerm",
      "mainEntityOfPage": "https://decisioninsights.ai/term/supply-chain/",
      "name": "Supply Chain"
    },
    {
      "@id": "https://decisioninsights.ai/term/supply-chain-risk-management-scrm/#definedterm",
      "@type": "DefinedTerm",
      "mainEntityOfPage": "https://decisioninsights.ai/term/supply-chain-risk-management-scrm/",
      "name": "Supply Chain Risk Management"
    }
  ],
  "mainEntityOfPage": "https://decisioninsights.ai/projects/openchain-security-assurance/",
  "maintainer": {
    "@id": "https://decisioninsights.ai/registry/openchain-project/#organization",
    "@type": "Organization",
    "mainEntityOfPage": "https://decisioninsights.ai/registry/openchain-project/",
    "name": "OpenChain Project"
  },
  "name": "OpenChain Security Assurance",
  "publisher": {
    "@id": "https://decisioninsights.ai/registry/openchain-project/#organization",
    "@type": "Organization",
    "mainEntityOfPage": "https://decisioninsights.ai/registry/openchain-project/",
    "name": "OpenChain Project"
  },
  "url": "https://www.openchainproject.org/security-assurance"
}
What we add

Topic graph

A wire service tags a release with a category, once. It doesn't maintain a durable graph over time. We connect them to a topic graph an agent can query.

Cybersecurity https://decisioninsights.ai/term/cybersecurity/ Certification https://decisioninsights.ai/term/certification/ Compliance https://decisioninsights.ai/term/compliance/ and 6 more

Counted facts

A protocol or open source project keeps no vendor list and publishes no figures of its own to check this against. This counts how it actually shows up across the graph -- articles that name it, the organizations named alongside it in those articles, similar projects, and organizations whose topic tags overlap with its own -- computed, not curated.

Related projects OpenChain, OpenChain ISO 5230, Open Source Security Foundation, Open Security Controller, Open Compliance Program, OCP Security, Open Source Readiness, CHAOSS Related organizations Black Duck Inn, Native Security, FOSSA, Insignary, Lineaje, Oligo Security, Fortress Information Security, Cloud Native Computing Foundation (CNCF)