The Open Source Security Foundation (OpenSSF) welcomes the European Commissions initiative to simplify and streamline cybersecurity and data incident reporting obligations across EU-level rules. We strongly support the objective of minimizing compliance costs while maintaining a high level of cybersecurity protection.
OPE
OpenSSF
Industry association · United States · EU Transparency Register 440231552636-41
7
positions filed
in the 665 files tracked
5
legislative files
of 665 tracked
7
with a full position paper
attached to a submission
Counts here are a floor, never a total: they cover the 665 consultation files tracked so far (57,774 submissions, mostly 2021–26), so an organization's real filing history is larger, not smaller.
Who they are
Among the 1106 non-governmental organisations on this site, they rank #246 by legislative files engaged, a count of participation, not a measure of influence.
1.2
declared lobbying FTE
self-declared
€10K+
declared costs / yr (floor)
0
EP accreditations
as declared to the register
2024
in the register since
- Register category
- Non-governmental organisations
- Registered as
- Open Source Security Foundation (OpenSSF)
- Head office
- San Francisco, United states
Self-declared to the EU Transparency Register (snapshot 14 Oct 2026); cost bands are floors, not audited totals. Reused under Commission Decision 2011/833/EU.
Track OpenSSF in PolicySpeak: request access →
Work at OpenSSF? so we know who speaks for it.
Their record over time
OpenSSF filed 7 positions between 14 Apr 2025 and 15 Jul 2026, across 5 of the 665 legislative files tracked here, attaching a full position paper 7 times.
2025 · 3 filed2026 · 4 filed
What they argued
The Open Source Security Foundation (OpenSSF) welcomes the European Commissions proposed amendments to the NIS 2 Directive as an important step toward a more coherent, scalable, and simplified EU cybersecurity framework.
OpenSSF welcomes the positive direction reflected in the revised Cybersecurity Act proposal and strongly supports the recognition of OSS stewards within the revised CSA framework. The submission highlights the importance of deeper cooperation between ENISA and open source communities to strengthen Europes cybersecurity resilience, software supply chain security, and secure-by-design objectives.
This is the Open Source Security Foundation (OpenSSF) Global Cyber Policy Working Groups response to the European Commissions Public Consultation for The EU Cybersecurity Act Call for Evidence (with comments from the OpenSSF Public Policy Committee). See the attached file for details of our response.
The Open Source Security Foundation (OpenSSF) welcomes the European Commissions draft Guidance on the application of Regulation (EU) 2024/2847 (Cyber Resilience Act) and appreciates the opportunity to contribute to this consultation.
Attached is the feedback from the Open Source Security Foundation (OpenSSF) on the Technical description of important and critical products with digital elements for the CRA. We used the comment template as requested. Thank you for the opportunity to comment.
The Open Source Security Foundation (OpenSSF) welcomes the review of the European Interoperability Framework (EIF) and supports its objectives of strengthening interoperability, digital sovereignty, resilience and competitiveness. While the Call for Evidence rightly emphasizes resilience and trust, it gives comparatively little attention to the cybersecurity dimension needed to achieve these objectives.
Looking for an argument rather than an organization? Search every submission for a phrase and see everyone who used it.
Put OpenSSF next to another organization. Same files, same register facts, side by side. Compare →
Turns up on the same files
Organizations that also filed on at least two of the same consultations. A shared interest in the same dossiers, not evidence of coordination, and we do not suggest any.
Showing 5 of 147.
Is this your organization?
Everything on this page comes from OpenSSF’s own submissions to the European Commission. We have added nothing and interpreted nothing. If something is wrong or out of date, email info@policyspeak.com and we will correct it. If you are an individual named in a record, our privacy policy sets out your rights to correction, objection and removal.
Quotes are verbatim from submissions published by the European Commission, trimmed to their opening passage and never summarized by a model. Organizations only, never individuals. Reused under Commission Decision 2011/833/EU; the European Commission is not liable for this reuse.