The EU-FOSSA project — short for Free and Open Source Software Auditing — aims to increase the security and integrity of critical open-source software. It was launched by the European Commission at the instigation of the European Parliament after the discovery of the Heartbleed bug in 2014.

Following the success of the initial pilot, the project was renewed for another three years. EU-FOSSA 2 builds on the pilot project by extending the auditing of free and open-source software through setting up bug bounty programmes, organising hackathons and conferences, and engaging with developer communities. In addition, EU-FOSSA 2 expanded its scope to a wider range of software projects and communities.


date: January 2019–augustus 2020

project page: https://joinup.ec.europa.eu/collection/eu-fossa-2

project deliverables: https://joinup.ec.europa.eu/collection/eu-fossa-2/eu-fossa-2-deliverables