Security Slam 2026 — Fall Edition: A 30-day open-source security challenge running Oct 5–Nov 6, 2026

# What the Security Slam is right now

The event helps open source projects improve their security hygiene by working through milestone-based challenges using OpenSSF tools and other resources. The organizers assembled a "Slam Library" of web resources and will staff an advisor channel on CNCF Slack during the month.

# Who can participate

# What participants will do Participants choose milestones aligned with their project maturity and use the Slam Library to follow step-by-step guidance. OpenSSF project leads, staff, and maintainers helped create the library and will remain available to answer questions throughout the event.

Advisors will be reachable via a dedicated CNCF Slack channel for clarifications and help with the security hygiene tasks.

# Recognitions and logistics Both project-level and individual recognitions are provided:

• Projects earn custom recognitions demonstrating the milestones they completed.

• Physical awards are available for pickup at the OpenSSF booth (#313) in the KubeCon solutions showcase during the KubeCon NA week. The last day to pick up printed awards is Thursday, November 12. The closing date for physical awards at KubeCon NA is Friday, November 6.

# What's new this year

• Slam website for the event period.
• Non-CNCF and non-Linux Foundation projects are explicitly invited to participate.
• A new metric is introduced to help projects prepare for the European Union's Cyber Resilience Act (CRA).

# Key dates

• November 6: Closing date for physical awards at KubeCon NA.
• November 11: Closing date for participant Credly digital badges.
• November 12: Final chance to pick up printed awards at the OpenSSF booth (#313) during KubeCon NA.

# How to join and next steps Register in advance to receive reminders and detailed instructions before October 5. During the month, use the Slam Library and the CNCF Slack advisor channel to work through milestones. If you plan to collect physical awards, schedule time at KubeCon NA to visit OpenSSF booth #313 between November 10–12.

# Why projects have joined in previous Slams Past iterations have varied in length and format. Earlier 30-day events produced tangible project wins and visible recognitions (badges and framed plaques) that projects kept on display. The 2026 Fall Slam returns to the monthlong format used in successful prior years and builds on the Spring 2026 outcomes where projects achieved major security milestones.

# Practical checklist for participants

• Register to receive event instructions and reminders.
• Review the Slam Library as soon as it opens on Oct 5 and map milestones to your project's priority areas.
• Join the dedicated CNCF Slack channel for advisor support.
• Track milestone completion for project recognition and individual Credly badges.
• If attending KubeCon NA, plan to collect physical awards at OpenSSF booth #313 by Nov 12.