OWASP OASIS Welcomes 1000 New Members to Community, Launches Grassroots Movement to Secure Open Source Software

SAN FRANCISCO, CA, UNITED STATES, November 5, 2026 /EINPresswire.com/ -- Today, OWASP OASIS, the global AppSec community dedicated to securing the open source software the world relies on, announced that 1000 members have joined the initiative. The organization has welcomed application security professionals from North America, South America, Europe, APAC, Australia, the Middle East, and Africa, united to validate AI-generated software vulnerability fixes. OWASP OASIS is an effective engine to educate and elevate its community of volunteers. Opportunities for engagement include community office hours, onboarding sessions and collaborative validation sessions, in local languages (including Australian) and time zones.

Learning how to participate by evaluating and validating or rejecting fixes empowers volunteers to share that information with their broader communities, amplifying their impact across their networks.

“OWASP OASIS gives defenders a way to make a difference, and it takes only a few minutes at a time,” said Michael Cartsonis, Co-Founder, AppSecAI. “When I give these training sessions, I see people light up once they understand the power they have to stop advising and finally make a difference. More and more people are joining every day to secure the open source code underlying 98% of the world’s applications.”

Members of OWASP OASIS receive access to AI-generated fixes, which quickly crowd-validate. Open source maintainers can review the now credible fixes and merge them. Since launching in late August, OWASP OASIS has grown rapidly, attracting a global audience and generating thousands of fixes for review.

“AppSec professionals and AI can’t work alone to fix open source. They need to work together,” said Chris Holt, Strategic Engagement and Community Architect, Intigriti. “OWASP OASIS draws on experienced AppSec professionals to review AI-generated fixes, so we preserve accuracy while cutting the time required to remediate vulnerabilities. Fix automation and human validation combined is what makes OASIS possible.”

The community has been cheering the initiative and participating in the OWASP OASIS leaderboard, helping to identify suitable candidate fixes and close open source vulnerabilities.

“AppSec has been helpless to help the open source community. Maintainers have been struggling to fix security because of the incredible noise created by untrusted AI-generated slop,” said Mandana Madison, an OWASP OASIS volunteer. “It’s an easy way to give back to the community; since I know my contributions gain community credibility, I know my contributed work isn’t wasted. I know that we’re working to protect not only my company, but just about everyone.”

With open source applications a primary target for attackers and AI powering a new wave of attacks (87% of open source code bases contain vulnerabilities), OWASP OASIS’s surge in membership comes at a critical time for open source security. Communities around the world are stepping up to the challenge.

How to Get Involved
Join the initiative at owasp-oasis.org. OWASP OASIS is also a finalist for the SANS Institute Difference Maker Awards. You can vote for OWASP OASIS here. https://www.sans.org/go/difference-makers-awards-2026

About OWASP OASIS
The Open Automated Security Initiative for Software (OASIS) is a vendor-neutral, community-driven initiative that mobilizes the Application Security community to deliver validated vulnerability fixes for the open source software that runs the world. By combining AI-powered fix automation with human expert validation, OASIS moves open source security from discovery to remediation at scale. OASIS is an OWASP project.
OWASP does not endorse any product, services, or tools.

Kira Wojack
Merritt & Rose Communications
+1 415-419-4062
Visit us on social media:
LinkedIn