OSF Mission

Open Security Foundation is a 501(c)(3) non-profit public organization founded and operated by information security enthusiasts.

We exist to empower all types of organizations by providing knowledge and resources so that they may properly detect, protect, and mitigate information security risks.

We believe that security information and services should be easily accessible for all who have the need for such information and services. We promote open collaboration between companies and individuals, provide unbiased information to uphold educated risk decision-making, and attempt to eliminate the need for redundant works.

OSF Directors and Officers

OSF Benefits

Leverage industry expertise of OSF members and the security community to provide accurate, detailed and unbiased information about the security of computers, networks, and personally identifying information.

Develop partnerships with security organizations that can gain benefit from OSF data and leverage both organizations' strengths (for example, providing vulnerability scanner users with OSVDB references, which prompts individuals to recognize and use OSVDB, and providing the DataLossDB for open research, which in turn promotes OSF as a recognized leader in breach data).

Areas of focus will include security vulnerabilities, security exploits, security testing information, security best-practices and providing information about the security of personally identifiable information.

Open Security Foundation is looking to sponsor and / or host new projects. Please contact us if you have an idea that you feel would benefit the information security community. All inquiries regarding contributions are welcome.


(The link above directs to the OSVDB donation page)

Open Security Foundation
5518 Olde Hartley Way

Glen Allen, VA 23060

About Open Security Foundation

Open Security Foundation provides independent, accurate, detailed, current, and unbiased security information. Open Security Foundation runs the Open Source Vulnerability Database (OSVDB) and the DataLossDB.


OSVDB's goal is to provide accurate and unbiased information about security vulnerabilities in computerized equipment. The core of OSVDB is a relational database which ties various information about security vulnerabilities into a common, cross-referenced data source. Data is acquired from common security industry sources, entered into the OSVDB database, and cross referenced with existing information.

Latest OSVDB News

dateauthor news
2008-07-31 Jkouns OSVDB in Vegas.....
2008-07-14 Jkouns OSF To Maintain Attrition.org's Data Loss Database
2008-07-07 Jericho Stop using Google, it's dangerous!
2008-07-07 Jericho The Black Market Code Industry
2008-07-06 Jericho VDBs Devolving?
2008-06-21 Jkouns OSVDB Featured in the Open Source Business Resource (OSBR)
2008-06-19 Jericho Coffee makers are SCADA, right?!
2008-05-30 Jericho Who's to blame? The hazard of "0-day".
2008-05-24 Jkouns Top vulnerability researcher?
2008-05-16 Jkouns Layered Technologies Continued Support of OSVDB

DataLossDB's goal is to provide accurate and unbiased information about breaches of personally identifying information when lost by or stolen from third parties. DataLossDB is a searchable database that promotes research and the sharing of information by professionals and enthusiasts alike. Data is acquired from verifiable media and government resources and is open for community participation.

Latest DataLossDB Incidents

recordsdateorganization(s)
3,000 2008-08-11 UK Borders Agency
380,000 2008-08-11 Ireland Department of Social and Family Affairs
250 2008-08-07 Objective Productions, BBC
0 2008-08-07 Bank of America
1,200 2008-08-06 Harris County Hospital District
15,000 2008-08-04 Arapahoe Community College
2,600 2008-08-01 Delphi Automotive, Ohio Department of Job and Family Services
2,000,000 2008-08-01 Countrywide Home Loans
1,581 2008-08-01 Stepping Hill Hospital
9,100 2008-07-31 University of Texas at Dallas
© 2005-2008 Open Security Foundation. All Rights Reserved.