OpenSSF Open Source Project Security Baseline (OSPS Baseline)
What is OpenSSF Open Source Project Security Baseline (OSPS Baseline)?
The OpenSSF Open Source Project Security Baseline v2026.08.28: 64 MUST requirements across access control, build and release, documentation, governance, legal, quality, security assessment and vulnerability management, each assigned to maturity levels 1 to 3 by the project's size and user base. It comprises 64 controls organised across 8 domains, and applies in International.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →Where OpenSSF Open Source Project Security Baseline (OSPS Baseline) overlaps with the standards you already hold
What OpenSSF Open Source Project Security Baseline (OSPS Baseline) means in your sector
What OpenSSF Open Source Project Security Baseline (OSPS Baseline) means for your job
Questions people ask about OpenSSF Open Source Project Security Baseline (OSPS Baseline)
What is OpenSSF Open Source Project Security Baseline (OSPS Baseline)?
How many controls does OpenSSF Open Source Project Security Baseline (OSPS Baseline) have?
Where does OpenSSF Open Source Project Security Baseline (OSPS Baseline) apply?
Which version of OpenSSF Open Source Project Security Baseline (OSPS Baseline) is covered here?
Query OpenSSF Open Source Project Security Baseline (OSPS Baseline) programmatically
OpenSSF Open Source Project Security Baseline (OSPS Baseline), its 64 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
OpenSSF Open Source Project Security Baseline (OSPS Baseline) API reference and MCP config →How ready are you for OpenSSF Open Source Project Security Baseline (OSPS Baseline)?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.