Safety, Security, and Privacy of Open-Source Ecosystems

Closed Posted

Opportunity number
24-608
Agency
Applications due
Award size
Not on record

Opportunity facts

Assistance listings
Funding instrument
Grant
Category
  • Science and Technology and other Research and Development
Eligible applicants
  • Other
Points of contact
Full announcement

Opportunity details come from Grants.gov. Updated .

About this opportunity

Written by GovTribe AI ·

The National Science Foundation is soliciting proposals to enhance the safety, security, and privacy of open-source ecosystems (OSEs) through the Safety, Security, and Privacy for Open-Source Ecosystems (Safe-OSE) program. The initiative seeks to address both technical vulnerabilities (such as code flaws and side-channel attacks) and socio-technical risks (including supply chain compromises, insider threats, and social engineering) across diverse open-source platforms spanning software, scientific methodologies, manufacturing processes, hardware specifications, and data platforms. Eligible applicants include open-source ecosystems regardless of prior NSF funding history, and proposals should focus on meaningful improvements in safety, security, and privacy characteristics that the target ecosystem lacks resources to undertake independently. The program emphasizes enhancement of the open-source product and supply chain security alongside strengthening the ecosystem's capabilities for managing current and future risks, attacks, breaches, and responses. The proposal deadline is April 28, 2026, and applicants should consult the detailed program solicitation for specific evaluation criteria regarding technical merit, broader impacts, and organizational capacity.

The Safe-OSE program operates under multiple NSF funding mechanisms including the Computer and Information Science and Engineering (CFDA 47.070), Technology, Innovation, and Partnerships (CFDA 47.084), and Engineering (CFDA 47.041) directorates, with award amounts typically ranging from $100,000 to $1.5 million depending on project scope and complexity. Projects are anticipated to span one to five years in duration, with performance conducted at eligible U.S. institutions of higher education, research organizations, and collaborating entities nationwide. The program prioritizes proposals from organizations representing the targeted open-source ecosystem, ensuring that funded activities directly address critical security and privacy gaps while building sustainable governance and risk management capabilities within the ecosystem itself.

Synopsis

2 versions

Update #2 · Latest ·

Vulnerabilities in an open-source product and/or its continuous development, integration and deployment infrastructure can potentially be exploited to attack any user (human, organization, and/or another product/entity) of the product. To respond to the growing threats to the safety, security, and privacy of open-source ecosystems (OSEs), NSF is launching theSafety, Security, and Privacy for Open-Source Ecosystems(Safe-OSE) program. This program solicits proposals from OSEs, including those not originally funded byNSF's Pathways to Enable Open-Source Ecosystems (POSE)program, to address significant safety, security, and/or privacy vulnerabilities, both technical (e.g., vulnerabilities in code and side-channels) and socio-technical (e.g., supply chain, insider threats). Although most open-source products are software-based, it is important to note that Safe-OSE applies to any type of OSE, including those based on scientific methodologies, models, and processes; manufacturing processes and process specifications; materials formulations; programming languages and formats; hardware instruction sets; system designs or specifications; and data platforms. The goal of the Safe-OSE program is to catalyze meaningful improvements in the safety, security, and privacy of the targeted OSE that the OSE does not currently have the resources to undertake. Funds from this program should be directed toward efforts to enhance the safety, security, and privacy characteristics of the open-source product and its supply chain as well as to bolster the ecosystem's capabilities for managing current and future risks, attacks, breaches, and responses.

Update #1 ·

Vulnerabilities in an open-source product and/or its continuous development, integration and deployment infrastructure can potentially be exploited to attack any user (human, organization, and/or another product/entity) of the product. To respond to the growing threats to the safety, security, and privacy of open-source ecosystems (OSEs), NSF is launching theSafety, Security, and Privacy for Open-Source Ecosystems(Safe-OSE) program. This program solicits proposals from OSEs, including those not originally funded byNSF's Pathways to Enable Open-Source Ecosystems (POSE)program, to address significant safety, security, and/or privacy vulnerabilities, both technical (e.g., vulnerabilities in code and side-channels) and socio-technical (e.g., supply chain, insider threats, and social engineering). Although most open-source products are software-based, it is important to note that Safe-OSE applies to any type of OSE, including those based on scientific methodologies, models, and processes; manufacturing processes and process specifications; materials formulations; programming languages and formats; hardware instruction sets; system designs or specifications; and data platforms. The goal of the Safe-OSE program is to catalyze meaningful improvements in the safety, security, and privacy of the targeted OSE that the OSE does not currently have the resources to undertake. Funds from this program should be directed toward efforts to enhance the safety, security, and privacy characteristics of the open-source product and its supply chain as well as to bolster the ecosystem's capabilities for managing current and future risks, attacks, breaches, and responses.

On GovTribe

Work this opportunity

  • Track it in your pipeline
  • Find teaming partners
  • Similar grant opportunities
  • Ask GovTribe AI about this opportunity
Try for free Login