OSTIF Blog

The Open Source Technology Improvement Fund is a corporate non-profit dedicated to securing open source apps that we all depend on. Securing software isn’t easy, and we know what it takes to succeed. By facilitating security audits and reviews, OSTIF makes it easy for projects to significantly improve security.

Popular posts: 3
Total points: 714
HN comments: 299
Rank: #1,869 company

Visit ostif.org → RSS feedOn Hacker News Aug 2016 – Jun 2025

Security & Privacy 3 Open Source 3

Most points Most discussed Most cited Newest

The VeraCrypt Audit Results

2016288 points92 commentscited by 3Security & Privacy details

VeraCrypt 1.18 and its bootloaders were evaluated. This release included a number of new features including non-western developed encryption options, a boot loader that supports UEFI (modern BIOSes), and more.

Ruby on Rails Audit Complete

2025214 points169 comments Security & Privacy details

The Open Source Technology Improvement Fund is proud to share the results of our security audit of Ruby on Rails . Ruby on Rails (or “Rails”) is an open source full stack web-application framework. Thanks to the help of X41 D-Sec , GitLab , and the Sovereign Tech Agency , Rails can provide more secure versions of the…

VeraCrypt to be audited

2016212 points38 comments Security & Privacy details

OSTIF is proud to announce that we have come to an agreement to fully fund an audit of VeraCrypt. Using funds that were donated by DuckDuckGo and VikingVPN , we plan to hire QuarksLab to go over the code and search for vulnerabilities and backdoors.