This article discusses OpenSSF's sponsorship of the Open Source in Finance Forum, emphasizing the importance of securing open source software in financial services. It highlights key presentations on AI security, the OSPS Baseline for managing open source risks, and the need for stable vulnerability data in the industry.

Mercator is an open-source web application designed to help organizations visualize and manage their information systems in compliance with regulatory standards. It provides comprehensive features such as architecture reports, compliance monitoring, and integration options, making it an essential tool for IT governance and risk management. Supported by an active community, Mercator is recognized for its quality and scalability in mapping digital environments.

CloudRec is an open-source multi-cloud security posture management platform that enhances the security of cloud environments through comprehensive asset collection, real-time inspection, and risk event operations. It features a flexible rule configuration engine based on OPA, supports multiple cloud providers like AWS and GCP, and offers user-friendly management tools for asset and risk operations. The platform allows for easy expansion and customization to meet enterprise needs.