On-Demand Webinar

Shifting Open-Source Security to the Source – and Keeping It There

When an open-source library enters your application, its security is your responsibility from install to removal. Regulators (EU CRA, FedRAMP, PCI DSS) are codifying it; enterprise customers are turning it into a procurement requirement.

Meeting that responsibility is getting harder. Supply chain attacks on public registries are intensifying. Vulnerability discovery is accelerating, with disclosure-to-exploit windows collapsing from months to minutes. Maintainers (largely unpaid volunteers) can’t always patch in time.

Today’s market offers only partial solutions: tools that flag what’s broken, catalogs that ship cleaner packages at install, vendors that pick up where maintainers leave off. None commits to SLA-backed remediation for as long as that version stays in your stack. Ownership of what happens after install stays with you.

Check out this session to see what comprehensive open-source security looks like, from first install through long after upstream stops shipping fixes.

Watch the Webinar Now

During this webinar, you’ll learn:

Why fragmented open-source security tooling has become a bottleneck for remediation and developer velocity, just when both need to accelerate
How SLA-backed remediation that lasts as long as your package version does is becoming a baseline expectation, not a stretch goal
Why the risk of unmaintained open-source packages hiding in your stack is bigger than most teams realize
How to keep an open-source package secure for as long as it’s in your stack, without owning all the work that comes with it

This session is designed for:

IT and engineering leaders responsible for open-source strategy, security, and lifecycle planning
Platform, infrastructure, DevOps, and SRE teams managing open-source packages in production environments
Security and compliance teams accountable for OSS risk, CVE exposure, software supply chain security, and audit readiness
Enterprise architects, application owners, and software leaders navigating long-term open-source dependency decisions

Why Watch?

Most open-source security thinking still puts the work inside your stack: scanning, gating, reacting. There’s a better place for that work to happen.

In this session, you’ll see what changes when open-source security shifts to the source and your team stops being the last line of defense.

This Webinar Will Be Led by

Artem Karasev

Senior Product Marketing Manager
at TuxCare

Artem Karasev is the Senior Product Marketing Manager at TuxCare, always working to make sure our products meet customer needs. With 14 years of experience in product marketing and business development, especially within the IT security industry, Artem is really passionate about innovative approaches that make daily tasks easier and solve tricky challenges for our customers.

Alex Knol

Vice President of SecureChain
at TuxCare

Alex Knol is Vice President of SecureChain at TuxCare, dedicated to building solutions that unlock real value for customers through intelligent security technology. With over 30 years of experience across services, government, and distribution, Alex brings deep expertise in software development, and business development—shaped by years of hands-on leadership running large-scale development organizations. Driven by a mission to solve the operational pain points that come with managing complex technical environments, Alex focuses on translating hard-won lessons into products and strategies that make customers' lives meaningfully easier.