What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The Linux Foundation announced $12.5 million in grants on March 17, 2026, to strengthen open-source software security. The seven named contributors are Anthropic, Amazon Web Services (AWS), GitHub, Google, Google DeepMind, Microsoft and OpenAI. Alpha-Omega and the Open Source Security Foundation (OpenSSF) will manage the funding. The announcement gives the combined total, but not a complete breakdown by contributor or a schedule of grants to projects.
What is the Linux Foundation’s $12.5 million for?
The funding is intended to help open-source maintainers and communities handle growing security work, including a rising volume of vulnerability reports produced by automated tools and AI systems. The Linux Foundation says many project teams lack the time, resources and tools to triage those findings and make fixes.
The planned approach is to work directly with maintainers, put practical security capabilities into the workflows projects already use, and support security work over the long term. Google has described the goal as shifting attention from discovering vulnerabilities to deploying fixes and equipping maintainers with tools; that describes an intended direction, not a result already delivered by this grant.
Who is funding and managing the grants?
The Linux Foundation named seven contributors to the $12.5 million total: Anthropic, AWS, GitHub, Google, Google DeepMind, Microsoft and OpenAI. It did not publish a complete amount-by-funder breakdown, so the total should not be read as equal contributions from each organization.
#1 Best Overall
AWS separately described an additional $2.5 million investment in Alpha-Omega. That figure is not a full allocation of the overall grant total.
Alpha-Omega and OpenSSF will manage the funding. The announcement does not identify a complete list of recipient projects or say when individual grants will be disbursed. The Linux Foundation’s announcement provides the funding details and statements from participating organizations.
Rank #2
Why does AI increase the pressure on maintainers?
Automated security systems can surface findings faster and at greater scale, but a report still needs to be assessed: maintainers must determine whether it is valid, understand its impact, prioritize it and, where appropriate, implement and verify a fix. More reports do not automatically mean more vulnerabilities have been fixed.
The Linux Foundation characterizes the current volume as an “unprecedented influx,” but its announcement does not provide an independently measured count of AI-generated findings. Greg Kroah-Hartman of the Linux kernel project cautioned that “Grant funding alone is not going to help solve the problem that AI tools are causing today on open source security teams.” He also said OpenSSF has resources to help maintainers with triage and processing. These are stakeholder views on the challenge and response, not an independent assessment of the grant’s effectiveness.
Recommended Free Tools
What security work has OpenSSF reported already?
OpenSSF’s 2026 account of its 2025 work describes activity that predates the March 2026 grant. These reported figures provide context about its ongoing work; they are not outcomes attributable to the new funding.
| Reported 2025 activity | Figure and qualification |
|---|---|
| Investment in critical open-source projects | $5.8 million across 14 projects, reported by OpenSSF in 2026. |
| Security audits and engagements | More than 60 completed during 2025, reported by OpenSSF in 2026. |
| Technical Initiative awards | More than $660,000 across 14 initiatives, reported by OpenSSF’s Technical Advisory Council in 2026. |
| Results from focused security engagements | 52 vulnerabilities fixed and five fuzzing frameworks implemented during 2025, as reported by OpenSSF in 2026. |
| Free training programs | Nearly 20,000 enrollments during 2025, reported by OpenSSF in 2026; enrollments are not necessarily unique learners. |
OpenSSF’s account of those activities is available in its 2026 report on 2025 work.
Rank #4
What is not yet known about the $12.5 million?
- The announcement does not give a complete contribution amount for each of the seven named organizations.
- It does not provide a full recipient-project list or a timetable for disbursements.
- It does not set out quantified targets or report results for the newly announced grants.
Google and GitHub have also described security tools or programs of their own. Those separate activities should not be treated as grant-funded deliverables unless the organizations specifically connect them to this funding. Google’s description of its aims is in its March 17, 2026 post; GitHub’s partner perspective, updated March 25, 2026, appears in its post on supporting open-source maintainers.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
