195 critical technologies worthy of investment identified
131 technologies supported since October 2022
45.8 m € invested in commissioned work
Current Investments
-
More about: Let’s Encrypt (2026)
Researching and deploying practically applicable post-quantum methods to secure the web
Learn more -
More about: Mastodon
Strengthening the fediverse with shared, interoperable infrastructure for safer and more resilient social networks
Learn more -
More about: Python Software Foundation
Securing CPython and PyPI, the leading language in AI, data, and modern computing
Learn more -
More about: KDE
Strengthening structural resilience and modernizing the technology stack of a leading desktop platform
Learn more -
More about: PHP (2025)
Modernizing and improving security, reliability, and collaboration in one of the web’s most widely used programming languages
Learn more -
More about: skforecast
Bridging general-purpose machine learning and time-series forecasting in the Python ecosystem
Learn more -
More about: Joomla
Modernizing one of the largest open source CMS to meet state-of-the-art accessibility standards
Learn more -
More about: Fedify
Simplifying the creation of ActivityPub-powered federated web applications within the Fediverse
Learn more -
More about: OSGi (Open Services Gateway initiative)
Revamping the OSGi framework for the modern Java ecosystem
Learn more -
More about: PHPStan
Enhancing the essential code analysis tool for state of the art secure PHP development
Learn more -
More about: Open Cloud Mesh
Ensuring the interoperability of institutional cloud services across providers and facilitating a global collaboration platform
Learn more -
More about: Let’s Encrypt
Implementing security measures and future-proofing the leading certificate authority to ensure a secure and trustworthy web
Learn more -
More about: Debian CI
Modernising core continuous integration infrastructure to ease contributions and improve reliability across a foundational operating system
Learn more -
More about: Sequoia (2026)
Streamlining the usability of the tools that protect security and privacy in digital communication
Learn more -
More about: FFmpeg (2026)
Advancing the infrastructure of the leading multimedia processing framework
Learn more -
More about: libmicrohttpd3
Securing dataflow for software in embedded systems, including IoT and ubiquitous computing
Learn more -
-
More about: Trifecta Tech Foundation
Securing internet communication and open-source operating systems with memory-safe building blocks
Learn more -
More about: GPShell & GlobalPlatform Smartcard Software
Strengthening an open alternative to proprietary smartcard management tools, including identity, payment, and access-control
Learn more -
More about: Processing
Modernizing one of the most influential open source software projects for digital literacy
Learn more -
More about: ActivityPub
Securing private messaging on the decentralised social web through state-of-the-art end-to-end encryption
Learn more -
More about: OpenPrinting
Maintaining and improving the core component to enable printing on Linux and other OSS operating systems
Learn more -
More about: SDCC
Improving a FOSS compiler for safe and secure firmware, in particular by supporting modern C standards
Learn more -
More about: Scala
Securing and modernizing the standard library and infrastructure of a modern multi-paradigm programming language
Learn more -
More about: chatmail
Improving the efficiency and security of email, and improving open, secure, end-to-end encrypted instant messaging
Learn more -
More about: PMD
Modernising the architecture, capabilities, and governance of a static code analyzer
Learn more -
More about: Servo
Improving accessibility, embedding support, and maintainability for a web rendering engine written in Rust
Learn more -
More about: Lodash
Strengthening a core JavaScript library with enhanced security, modernization, and broader community collaboration
Learn more -
More about: Reproducible Builds (2025)
Ensuring the security and integrity of open source software throughout its lifecycle, from source to binary code
Learn more -
More about: Drupal (2025)
Modernising the infrastructure and tooling for developing and maintaining a major content management system of the web
Learn more -
More about: Open Web Docs (2025)
Expanding developer documentation with security and privacy guidance on the leading resource platform for core web technologies
Learn more -
More about: phpseclib
Modernizing cryptographic libraries to improve efficiency, clarity, and compliance across widely adopted PHP applications
Learn more -
More about: conda
Establishing standards, systematizing documentation, and coordinating maintenance in a multi-stakeholder, cross-platform, language-agnostic packaging ecosystem
Learn more -
More about: R Project
Unifying and modernizing the core infrastructure of a leading language and environment for statistical computing and graphics
Learn more -
More about: systemd (2025)
Extending the Linux OS core infrastructure to improve security, integrity and robustness for multi-user systems
Learn more -
More about: Apache Arrow
Improving the CI, build and supply chain infrastructure for a major scientific computing project
Learn more -
More about: OpenSSL Foundation
Strengthening global Internet security and privacy by fixing vulnerabilities and accelerating a future-proof backlog management
Learn more -
More about: wondermagick
Building a drop-in alternative for imagemagick in memory-safe Rust
Learn more -
More about: Babel
Streamlining the JavaScript ecosystem by advancing version 8 migration and support and infrastructure updates
Learn more -
More about: rustls
Developing a high-performance memory-safe TLS library to provide security, privacy and integrity in Internet communication
Learn more -
More about: Package-URL (PURL)
Enhancing the open standard for universal package identifiers to strengthen security, compliance, and long-term resilience
Learn more -
More about: Rust Foundation
Investing in the development and release infrastructure that enables the memory-safe programming language Rust
Learn more -
More about: Incus
Extending release and tooling infrastructure for a next-generation system- and application container, and virtual machine manager
Learn more -
More about: Apache Maven
Modernizing and securing a vital component of critical supply-chain infrastructure in Java
Learn more -
More about: OpenSSF Scorecard
Implementing supply-chain security checks, addressing technical debt, and enhancing documentation to automatically assess the security health of FOSS projects
Learn more -
More about: Pipewire
Providing accessibility support for ASHA hearing aid technology and addressing technical debt within the framework
Learn more -
More about: Eclipse Foundation
Strengthening the Eclipse Foundation open source ecosystem by introducing SBOM generation and improved vulnerability management processes
Learn more -
More about: Arch Linux Package Management
Rigorous modernization of the foundational package management layers with reusable and memory-safe implementations
Learn more -
More about: OpenStreetMap
Ensuring the stability, growth and modernization of the core software powering the global open mapping ecosystem
Learn more -
More about: FreeBSD
Improving the infrastructure, security, regulatory compliance, and developer experience of an open source operating system
Learn more -
More about: GNU libmicrohttpd
Building high-performance HTTP servers in applications reliably, securely, and efficiently
Learn more -
More about: JUnit
Making automated testing for the Java ecosystem and JVM more reliable, efficient, and sustainable
Learn more -
More about: Samba
Enhancing the security, scalability, and functionality of an essential implementation of SMB and IAM protocols
Learn more -
More about: FFmpeg
Maintaining the sustainability, security, and innovation of a leading multimedia processing framework
Learn more -
More about: Vinyl Cache
Advancing web content delivery with better documentation, accessibility, community engagement, and built-in TLS/HTTP3
Learn more
Contribute Back Challenges
-
More about: OpenPGP documentation for application developers
Providing up-to-date OpenPGP documentation for application developers
Learn more -
More about: Securing Apache Airflow
Enhancing the security model of a pivotal workflow orchestration component in the Python ecosystem.
Learn more -
More about: Nix ecosystem supply chain security
Reinforcing the security framework of an an open source build and configuration management system across the full software development life cycle
Learn more -
More about: RuntimeTypeInspector.js
A tool that allows JavaScript projects of any kind to enable runtime type checking
Learn more -
More about: Haskell Cabal
Build system and package manager for the Haskell programming language
Learn more -
More about: Rusty SBOMs
cyclonedx-rust-cargo is emerging as the standard for creating Software Bill of Materials for the Rust ecosystem and the CycloneDX standard
Learn more -
More about: p5.js Documentation Organization & Accessibility
A free, open source JavaScript library for creative coding, with a focus on making coding accessible and inclusive for artists, designers, educators, and beginners
Learn more -
More about: Open Web Docs
Documenting accurate compatibility data for web technologies and maintaining tools that support this documentation
Learn more -
More about: conda-store
An open source tool for managing data science environments in collaborative teams.
Learn more
Past Investments
-
-
More about: Python Package Index
Improving Python ecosystem security in collaboration with Trail of Bits
Learn more -
More about: The Yocto Project
Creating flexible, custom operating systems for embedded and IoT devices
Learn more -
More about: ActivityPub Test Suite
Strengthening interoperability in the ecosystem of decentralized, federated social networks
Learn more -
More about: Rosenpass
Building quantum-safe, resilient encryption for internet infrastructure with enhanced stability and supply chain protection
Learn more -
More about: GNOME
Improving accessibility, tooling, and security for the Linux desktop ecosystem
Learn more -
More about: GFortran
Advancing an open source Fortran compiler, to enable modern, efficient capabilities for high-performance computing and scientific research
Learn more -
More about: GStreamer (2023)
Re-implementing a multimedia framework’s low-level network protocol for increased security, maintainability, and sustainability
Learn more -
More about: Fortran
Modernizing an established programming language to become more performant and user-friendly for scientific communities
Learn more -
-
More about: Reproducible Builds (2023)
Ensuring the security and integrity of open source software throughout its lifecycle, from source to binary code
Learn more -
More about: Bundler & RubyGems (2022)
Package management for a popular programming language
Learn more -
-
-
More about: Prossimo
Securing critical and vulnerable internet infrastructure by moving it into memory-safe code
Learn more -
More about: Mamba
Enabling secure software package management for science and industry on major operating systems
Learn more -
-
More about: OpenBLAS
Keeping high performance linear algebra computation accessible and open for all
Learn more -
-
-
-
-
More about: Pendulum
Providing accurate time on millions of devices and networks fundamental to the internet and other critical infrastructure.
Learn more -
More about: PHP (2023)
Improving the long-term sustainability and security of the PHP ecosystem
Learn more -
More about: RubyGems & Bundler (2023)
Package management for Ruby, a popular programming language
Learn more -
More about: Sequoia PGP (2022)
Secure communication, signatures and authentication, in Rust
Learn more -
More about: Sequoia PGP (2023)
Secure communication, signatures, and authentication, in Rust
Learn more -
-
More about: Drupal (2023)
Advancing software production security and enhancing developer tools of a widely used content management system
Learn more -
More about: systemd (2023)
Improving the development and release testing infrastructure of a component used in many Linux distributions
Learn more -
More about: Domain
Expanding a comprehensive, memory-safe library for building privacy and security-conscious DNS applications
Learn more